Unscored severity · published Oct 14, 2008
CVE-2008-2588
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JD
Jdeveloper · Oracle
10.1.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2588
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2588
Vendor Advisory
http://secunia.com/advisories/32291
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html
www.securitytracker.com
http://www.securitytracker.com/id?1021054
www.vupen.com
http://www.vupen.com/english/advisories/2008/2825
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45877
More from Jdeveloper
9.8
CVE-2022-21445
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
10.0
CVE-2018-14721
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class…
9.8
CVE-2022-23305
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout
9.8
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
9.8
CVE-2018-14718
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic…