CVE-2008-7236: oracle application_server

EPSS trend

Probability

4.17%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.17% on 20-09-2026

20-09-202620-10-2026

EPSS score

4.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

10 links

securitytracker.com/id?1019218VDB EntryX Refsource SECTRACKPatchThird Party Advisory
www.securityfocus.com/bid/27229VDB EntryX Refsource BIDExploitThird Party Advisory
www.us-cert.gov/cas/techalerts/TA08-017A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.vupen.com/english/advisories/2008/0150VDB EntryX Refsource VUPENPatchThird Party Advisory
www.vupen.com/english/advisories/2008/0180VDB EntryX Refsource VUPENPatchThird Party Advisory
marc.info?l=bugtraq&m=120058413923005&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
www.oracle.com/technetwork/topics/security/cpujan2008-086860.htmlX Refsource CONFIRMBroken Link
secunia.com/advisories/28556Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/40297VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/28518Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2018-0735alpinenodejs+324.72%7y ago29-10-2018 13:00The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).CVE-2018-5407alpineopenssl+333.42%7y ago15-11-2018 21:00Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.CVE-2007-3854oracleapex+82.53%19y ago18-07-2007 19:00Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.CVE-2020-1967alpineopenssl+4853.34%6y ago21-04-2020 13:45Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).CVE-2001-0326oracleapplication_server+15.18%25y ago07-05-2001 04:00Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.CVE-2001-0419oracleapplication_server24.45%25y ago24-05-2001 04:00Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.

All vulnerabilities inapplication_server

CVE-2008-7236: oracle application_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References