CVE-2007-3861: oracle application_server

EPSS trend

Probability

2.44%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

0.00 pp

From 2.44% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143Vendor AdvisoryX Refsource HP
secunia.com/advisories/26114Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26166Third Party AdvisoryX Refsource SECUNIA
www.oracle.com/technetwork/topics/security/cpujul2007-087014.htmlX Refsource CONFIRM
www.us-cert.gov/cas/techalerts/TA07-200A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.vupen.com/english/advisories/2007/2562VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2007/2635VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/35490VDB EntryX Refsource XF
www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdfX Refsource MISC
www.securitytracker.com/id?1018415VDB EntryX Refsource SECTRACK

Show all 11 references

www.red-database-security.com/advisory/oracle_cpu_jul_2007.htmlX Refsource MISC

Related vulnerabilities

CVE-2018-0735alpinenodejs+324.72%7y ago29-10-2018 13:00The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).CVE-2018-5407alpineopenssl+333.42%7y ago15-11-2018 21:00Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.CVE-2007-2130oracleapplication_server+22.53%19y ago18-04-2007 18:00Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.CVE-2007-2125oraclecollaboration_suite2.24%19y ago18-04-2007 18:00Unspecified vulnerability in Collaborative Workspace in Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka OCS01.CVE-2007-0286oracleapplication_server+11.75%19y ago17-01-2007 02:00Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related to Containers for J2EE, aka OC4J07.CVE-2007-0280oracleapplication_server+23.93%19y ago17-01-2007 02:00Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OPMN01 is for a buffer overflow in Oracle Notification Service (ONS).

All vulnerabilities inapplication_server collaboration_suite

CVE-2007-3861: oracle application_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References