Unscored severity · published Jan 14, 2009
CVE-2008-5446
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the "About Us Page" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-business Suite · Oracle
11.5 · source: NVD
ES
E-business Suite 12 · Oracle
12.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5446
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5446
secniche.org
http://secniche.org/papers/orabs.pdf
Vendor Advisory
http://secunia.com/advisories/33525
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/500171/100/0/threaded
Exploit
http://www.securityfocus.com/bid/33177
www.securitytracker.com
http://www.securitytracker.com/id?1021568
More from E-business Suite
9.8
CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
9.8
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
9.8
CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
9.8
CVE-2025-30727
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)