{ "id": "CVE-2007-2130", "sourceIdentifier": "cve@mitre.org", "published": "2007-04-18T18:19:00.000", "lastModified": "2018-10-16T16:42:14.523", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01." }, { "lang": "es", "value": "Vulnerabilidad no especificada en Workflow Cartridge, tal y como se usa en Oracle Database Server 9.2.0.1, 10.1.0.2, y 10.2.0.1; Application Server 9.0.4.3 y 10.1.2.0.2; Collaboration Suite 10.1.2; y E-Business Suite; tienen un impacto desconocido y vectores de ataque remotos autenticados, tambi\u00e9n conocido como OWF01." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "baseScore": 9.0 }, "baseSeverity": "HIGH", "exploitabilityScore": 8.0, "impactScore": 10.0, "acInsufInfo": false, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "9CA9867F-D7BC-4230-9584-C2FBB6642482" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F0B4BAA9-D045-4D2B-8220-47F47ED936DF" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "DDF7ABE6-0AFB-4A74-A533-2D390991A6CA" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:9.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7D1C89A9-5512-49E2-B932-9CE68323041B" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "553BAC35-0A37-40C2-A150-F34D59D097F4" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:database_server:10.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "389C8910-D7E7-4B50-A506-58B425B2BE70" }, { "vulnerable": true, "criteria": "cpe:2.3:a:oracle:e-business_suite:*:*:*:*:*:*:*:*", "matchCriteriaId": "2CACA4D3-89A2-464F-9957-65B36B893B3B" } ] } ] } ], "references": [ { "url": "http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf", "source": "cve@mitre.org" }, { "url": "http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html", "source": "cve@mitre.org" }, { "url": "http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/archive/1/466329/100/200/threaded", "source": "cve@mitre.org" }, { "url": "http://www.securityfocus.com/bid/23532", "source": "cve@mitre.org" }, { "url": "http://www.securitytracker.com/id?1017927", "source": "cve@mitre.org" }, { "url": "http://www.us-cert.gov/cas/techalerts/TA07-108A.html", "source": "cve@mitre.org", "tags": [ "US Government Resource" ] }, { "url": "http://www.vupen.com/english/advisories/2007/1426", "source": "cve@mitre.org" } ] }