CVE-2007-0289: oracle application_server

EPSS trend

Probability

2.66%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

+0.51 pp

From 2.14% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

osvdb.org/32899VDB EntryX Refsource OSVDB
secunia.com/advisories/23794Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/22083VDB EntryX Refsource BID
osvdb.org/32900VDB EntryX Refsource OSVDB
www.oracle.com/technetwork/topics/security/cpujan2007-101493.htmlX Refsource CONFIRM
www.us-cert.gov/cas/techalerts/TA07-017A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
osvdb.org/32895VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/31541VDB EntryX Refsource XF
securitytracker.com/id?1017522VDB EntryX Refsource SECTRACK

Related vulnerabilities

CVE-2018-0735alpinenodejs+324.72%7y ago29-10-2018 13:00The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).CVE-2018-5407alpineopenssl+333.42%7y ago15-11-2018 21:00Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.CVE-2007-3854oracleapex+82.53%19y ago18-07-2007 19:00Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.CVE-2020-1967alpineopenssl+4853.34%6y ago21-04-2020 13:45Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).CVE-2001-0326oracleapplication_server+15.18%25y ago07-05-2001 04:00Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.CVE-2001-0419oracleapplication_server24.45%25y ago24-05-2001 04:00Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.

All vulnerabilities inapplication_server

CVE-2007-0289: oracle application_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References