Vulnerability in Oracle E-Business Suite

CVE-2009-1000

The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and attack vectors.

EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.

Affected products

Oracle E-business_suite — versions 11i10cu2, 12.0.6
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

secalert_us@oracle.com (vdb-entry, x_refsource_BID)
secalert_us@oracle.com (x_refsource_OSVDB, vdb-entry)
secalert_us@oracle.com (vdb-entry, x_refsource_SECTRACK)
secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM)