CVE-2009-1017

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.

Score

CVSS 2.0 4.0 Medium

Status

Modified - secalert_us@oracle.com

Published

2009-04-15

Last modified

2024-08-07

Affected products

• Application Server (Oracle)

References

• http://osvdb.org/53746
• http://secunia.com/advisories/34693
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022055
• http://www.us-cert.gov/cas/techalerts/TA09-105A.html