First published: Wed Apr 15 2009(Updated: )
Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Application Server | =5.6.2 | |
Oracle Application Server | =10.1.3.4 | |
Oracle Application Server | =10.1.3.2.1 | |
Oracle Application Server | =10.1.3.3.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-1017 is classified as a moderate severity vulnerability affecting Oracle Application Server.
To mitigate CVE-2009-1017, apply the latest patches provided by Oracle for affected versions of the Application Server.
Remote authenticated users of Oracle Application Server versions 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 are affected by CVE-2009-1017.
CVE-2009-1017 is an unspecified vulnerability that affects the confidentiality of the BI Publisher component in Oracle Application Server.
Yes, CVE-2009-1017 can be exploited by remote authenticated users.