CVE-2005-3449
Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and (4) AS11 in Web Cache.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 5.75% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- oracle/application server
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/17250
- http://www.kb.cert.org/vuls/id/210524US Government Resource
- http://www.kb.cert.org/vuls/id/376756US Government Resource
- http://www.kb.cert.org/vuls/id/512716US Government Resource
- http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
- http://www.securityfocus.com/bid/15134
- http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource
- http://secunia.com/advisories/17250
- http://www.kb.cert.org/vuls/id/210524US Government Resource
- http://www.kb.cert.org/vuls/id/376756US Government Resource
- http://www.kb.cert.org/vuls/id/512716US Government Resource
- http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
- http://www.securityfocus.com/bid/15134
- http://www.us-cert.gov/cas/techalerts/TA05-292A.htmlUS Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.