CVE-2008-7238

Public Exploit

Description

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

6.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 1.84% Top 20%

Vendor Advisory marc.info Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory vupen.com

Affected: n/a n/a

References

Link	Tags
http://securitytracker.com/id?1019218	vdb entry patch
http://www.securityfocus.com/bid/27229	exploit vdb entry patch
http://www.us-cert.gov/cas/techalerts/TA08-017A.html	us government resource third party advisory patch
http://www.vupen.com/english/advisories/2008/0150	vdb entry patch vendor advisory
http://www.osvdb.org/40286	vdb entry
http://www.vupen.com/english/advisories/2008/0180	vdb entry patch
http://www.osvdb.org/40290	vdb entry
http://marc.info/?l=bugtraq&m=120058413923005&w=2	vendor advisory
http://www.osvdb.org/40284	vdb entry
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
http://secunia.com/advisories/28556	third party advisory vendor advisory
http://www.osvdb.org/40288	vdb entry
http://secunia.com/advisories/28518	third party advisory vendor advisory
http://www.osvdb.org/40289	vdb entry

Frequently Asked Questions

What is the severity of CVE-2008-7238?: CVE-2008-7238 has been scored as a medium severity vulnerability.
How to fix CVE-2008-7238?: To fix CVE-2008-7238, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2008-7238 being actively exploited in the wild?: It is possible that CVE-2008-7238 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.