VulnerabilityModified

CVE-2006-1884

Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.

HIGH 10.0EPSS 3.84%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.84%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 3.84% probability · 90th percentile
CISA KEV: Not listed
Affected: jdedwards/enterpriseone tools · oneworld/oneworld tools · oracle/application server · oracle/collaboration suite · oracle/collaboration suite 10g release 1 · oracle/database server · oracle/developer suite · oracle/e-business suite · oracle/enterprise manager grid control · oracle/peoplesoft enterprise tools · oracle/pharmaceutical · oracle/workflow
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.