Unscored severity · published Jan 14, 2009
CVE-2008-2623
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JD
Jdeveloper · Oracle
10.1.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2623
secunia.com
http://secunia.com/advisories/33525
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
www.securityfocus.com
http://www.securityfocus.com/bid/33177
www.securitytracker.com
http://www.securitytracker.com/id?1021572
www.vupen.com
http://www.vupen.com/english/advisories/2009/0115
More from Jdeveloper
9.8
CVE-2022-21445
Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
10.0
CVE-2018-14721
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class…
9.8
CVE-2022-23305
By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout
9.8
CVE-2020-10683
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
9.8
CVE-2018-14718
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic…