CVE-2008-0347 Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknow...
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has unknown impact and local attack vectors, aka OCS01. NOTE: Oracle has not disputed a reliable claim that this issue is related to WKSYS schema privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle application server | = 1.0.2.2 | No fix listed |
| oracle application server | = 9.0.4.3 | No fix listed |
| oracle application server | = 10.1.2.0.2 | No fix listed |
| oracle application server | = 10.1.2.1.0 | No fix listed |
| oracle application server | = 10.1.2.2.0 | No fix listed |
| oracle application server | = 10.1.3.0.0 | No fix listed |
| oracle application server | = 10.1.3.1.0 | No fix listed |
| oracle application server | = 10.1.3.3.0 | No fix listed |
| oracle application server 9i | = 9.0.4.3 | No fix listed |
| oracle application server 9i | = 10.1.2.0.2 | No fix listed |
| oracle collaboration suite | = 10.1.2 | No fix listed |
| oracle database server | = 9.0.1.5 | No fix listed |
| oracle database server | = 9.2.0.8 | No fix listed |
| oracle database server | = 9.2.0.8dv | No fix listed |
| oracle database server | = 10.1.0.5 | No fix listed |
| oracle database server | = 10.2.0.2 | No fix listed |
| oracle database server | = 10.2.0.3 | No fix listed |
| oracle database server | = 11.1.0.6 | No fix listed |
| oracle e-business suite | = 11.5.9 | No fix listed |
| oracle e-business suite | = 11.5.10 | No fix listed |
| oracle e-business suite | = 11.5.10.2 | No fix listed |
| oracle e-business suite | = 12.0.0 | No fix listed |
| oracle e-business suite | = 12.0.1 | No fix listed |
| oracle e-business suite | = 12.0.2 | No fix listed |
| oracle e-business suite | = 12.0.3 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle PeopleSoft Enterprise PeopleTools | = 8.47 | No fix listed |
| oracle PeopleSoft Enterprise PeopleTools | = 8.48 | No fix listed |
| oracle PeopleSoft Enterprise PeopleTools | = 8.49 | No fix listed |
References
- SSRT061201 vendor-advisory
- 28518 third-party-advisory vendor-advisory
- 28556 third-party-advisory vendor-advisory
- 1019218 vdb-entry
- www.oracle.com
- www.petefinnigan.com
- 20080130 PeteFinnigan.com Limited advisory for Oracle January 2008 CPU mailing-list
- 27229 vdb-entry
- TA08-017A third-party-advisory us-government-resource
- ADV-2008-0150 vdb-entry vendor-advisory
- ADV-2008-0180 vdb-entry vendor-advisory