Vulnerability Intelligence Report
CVE-2008-0347
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:2.70%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| oracle | application_server | 1.0.2.2, 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, 10.1.2.2.0, 10.1.3.0.0, 10.1.3.1.0, 10.1.3.3.0 |
| oracle | application_server_9i | 9.0.4.3, 10.1.2.0.2 |
| oracle | collaboration_suite | 10.1.2 |
| oracle | database_server | 9.0.1.5, 9.2.0.8, 9.2.0.8dv, 10.1.0.5, 10.2.0.2, 10.2.0.3, 11.1.0.6 |
| oracle | e-business_suite | 11.5.9, 11.5.10, 11.5.10.2, 12.0.0, 12.0.1, 12.0.2, 12.0.3 |
| oracle | peoplesoft_enterprise_peopletools | 8.47, 8.48, 8.49 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
2.696%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2008-01-17T00:00:00 |
| Published | 2008-01-17T22:00:00 |
| Patch Date | 2008-01-15 |
| Last Updated | 2024-08-07T07:39:35 |
Community Chatter & Buzz