Unscored severity · published Apr 15, 2009
CVE-2009-1000
The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E-business Suite · Oracle
11i10cu2; 12.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1000
osvdb.org
http://osvdb.org/53755
secunia.com
http://secunia.com/advisories/34693
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
www.securityfocus.com
http://www.securityfocus.com/bid/34461
www.securitytracker.com
http://www.securitytracker.com/id?1022056
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
More from E-business Suite
9.8
CVE-2026-46817
Oracle E-Business Suite Improper Privilege Management Vulnerability
9.8
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
9.8
CVE-2022-21587
Oracle E-Business Suite Unspecified Vulnerability
7.5
CVE-2025-61884
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
9.8
CVE-2025-30727
Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)