CVE-2007-3866
First published: Wed Jul 18 2007(Updated: )
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS03), (c) Oracle Application Object Library (APPS09), and (1) APPS12, (2) APPS13, and (3) APPS14 in (d) Oracle Payables.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle E-Business Suite | =11.5.10.2 | |
| Oracle E-Business Suite | =12.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
- http://secunia.com/advisories/26114
- http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
- http://www.us-cert.gov/cas/techalerts/TA07-200A.html
- http://www.securitytracker.com/id?1018415
- http://secunia.com/advisories/26166
- http://www.vupen.com/english/advisories/2007/2562
- http://www.vupen.com/english/advisories/2007/2635
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143
- http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35490
- http://www.securityfocus.com/archive/1/474515/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-3866?
CVE-2007-3866 has a high severity rating due to multiple unspecified vulnerabilities that allow remote attackers to exploit the system.
How do I fix CVE-2007-3866?
To fix CVE-2007-3866, ensure that you apply the latest security updates provided by Oracle for E-Business Suite versions 11.5.10.2 and 12.0.1.
What versions are affected by CVE-2007-3866?
CVE-2007-3866 affects Oracle E-Business Suite versions 11.5.10CU2 and 12.0.1.
What is the impact of CVE-2007-3866?
The impact of CVE-2007-3866 includes potential unauthorized access and manipulation of sensitive information by remote attackers.
Is there a workaround for CVE-2007-3866?
There are no official workarounds for CVE-2007-3866; applying security patches is strongly recommended.
- agent/softwarecombine
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/oracle
- canonical/oracle e-business suite
- version/oracle e-business suite/11.5.10.2
- version/oracle e-business suite/12.0.1