Unscored severity · published Sep 14, 2009
CVE-2008-7238
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-business Suite · Oracle
12.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7238
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7238
marc.info
http://marc.info/?l=bugtraq&m=120058413923005&w=2
Vendor Advisory
http://secunia.com/advisories/28518
Vendor Advisory
http://secunia.com/advisories/28556
Patch
http://securitytracker.com/id?1019218
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujan2008-086860.html
www.osvdb.org
http://www.osvdb.org/40284
More from E-business Suite
9.8
CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
9.8
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
9.8
CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
9.8
CVE-2025-30727
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)