CVE-2008-5446: Low severity Oracle E-Business Suite vulnerability
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the "About Us Page" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5446?
CVE-2008-5446 is classified as a moderate severity vulnerability.
How do I fix CVE-2008-5446?
Fixing CVE-2008-5446 requires applying the latest security patches from Oracle for the affected versions of E-Business Suite.
Who is affected by CVE-2008-5446?
CVE-2008-5446 affects remote authenticated users of Oracle E-Business Suite versions 11.5.10 CU2 and 12.0.6.
What impact does CVE-2008-5446 have on confidentiality?
CVE-2008-5446 allows remote authenticated users to potentially compromise the confidentiality of data.
When was CVE-2008-5446 disclosed?
CVE-2008-5446 was disclosed in January 2009 as part of Oracle's Critical Patch Update.