PT-2008-4055 · Oracle · Oracle Istore+1

Published 2008-07-15 · Updated 2012-10-23 · CVE-2008-2601

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 12.0.4

Description The issue concerns an unspecified vulnerability in the Oracle iStore component. It has remote authenticated attack vectors, but the impact is unknown.

Recommendations For Oracle E-Business Suite version 12.0.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-2601

Affected Products

Oracle E-Business Suite

Oracle Istore

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-2601 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143 · Vendor Advisory
• http://securitytracker.com/id?1020495 · Note
• http://oracle.com/technetwork/topics/security/cpujul2008-090335.html · Note
• http://secunia.com/advisories/31113 · Note
• http://secunia.com/advisories/31087 · Note
• http://vupen.com/english/advisories/2008/2115 · Note
• http://vupen.com/english/advisories/2008/2109/references · Note