CVE-2009-1990 Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.

LowCVSS 1.7 EPSS 0.39%

Published: 2009-10-22 21:00
Updated: 2026-06-17 02:08
Exploit status: No public exploit known

Description

Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.

Affected products

Product	Affected versions	Fixed in
oracle application server	= 10.1.3.4.1	No fix listed

References

59117 vdb-entry
37099 third-party-advisory
www.oracle.com
36749 vdb-entry
1023058 vdb-entry
TA09-294A third-party-advisory us-government-resource

CVSS v2.0

1.7 Low

AV:L/AC:L/Au:S/C:P/I:N/A:N

Access Vector: Local
Access Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.39% (percentile 33.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.