exploitDog

CVE-2008-2589

Опубликовано: 15 июл. 2008

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:application_server:10.1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:oracle_portal_component:*:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00494

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-459m-7pc3-wx6x

github

почти 4 года назад

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.

EPSS

Процентиль: 65%

0.00494

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo