CVE-2007-2170
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.9%
The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Produtos afetados
n/a · n/aReferências
http://osvdb.org/39958http://securityreason.com/securityalert/2611http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_apr_2007.htmlhttp://www.securityfocus.com/archive/1/466214/100/0/threadedhttp://www.zerodayinitiative.com/advisories/ZDI-07-016.html