PT-2008-3359 · Oracle · Oracle E-Business Suite

Published 2008-04-16 · Updated 2018-10-11 · CVE-2008-1827

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2 through 12.0.4

Description The issue affects various components of Oracle E-Business Suite, including Advanced Pricing, Application Object Library, Applications Manager, and Applications Technology Stack. These components are identified by codes such as APP02, APP03, APP04, APP07, APP11, APP06, and APP08. The impact and attack vectors of these vulnerabilities are not specified.

Recommendations For Oracle E-Business Suite version 11.5.10.2, update to a version that includes fixes for the affected components. For Oracle E-Business Suite version 12.0.4, update to a version that includes fixes for the affected components. As a temporary workaround, consider restricting access to the Advanced Pricing, Application Object Library, Applications Manager, and Applications Technology Stack components until a patch is available.

Fix

Related Identifiers

CVE-2008-1827

Affected Products

Oracle E-Business Suite

References · 17

• http://securityfocus.com/archive/1/491024/100/0/threaded · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1827 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42056 · Note
• http://secunia.com/advisories/29829 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41858 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42062 · Note
• http://oracle.com/technetwork/topics/security/cpuapr2008-082075.html · Note
• http://secunia.com/advisories/29874 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42063 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42064 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42059 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42057 · Note
• http://vupen.com/english/advisories/2008/1267/references · Note
• http://vupen.com/english/advisories/2008/1233/references · Note
• http://securitytracker.com/id?1019855 · Note