Vulnerability Details : CVE-2007-0280

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OPMN01 is for a buffer overflow in Oracle Notification Service (ONS).

Vulnerability category: Overflow

Published 2007-01-17 02:28:00

Updated 2017-07-29 01:30:06

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-0280

Probability of exploitation activity in the next 30 days: 0.84%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 80 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-0280

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2007-0280

Products affected by CVE-2007-0280

Oracle » Http Server » Version: 9.0.1.5
cpe:2.3:a:oracle:http_server:9.0.1.5:*:*:*:*:*:*:*
Matching versions
Oracle » Application Server » Version: 10.1.2.0.2
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
Matching versions
Oracle » Application Server » Version: 9.0.4.3
cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
Matching versions
Oracle » Application Server » Version: 10.1.2.2
cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
Matching versions
Oracle » Collaboration Suite » Version: 9.0.4.2
cpe:2.3:a:oracle:collaboration_suite:9.0.4.2:*:*:*:*:*:*:*
Matching versions
Oracle » Collaboration Suite » Version: 10.1.2
cpe:2.3:a:oracle:collaboration_suite:10.1.2:*:*:*:*:*:*:*
Matching versions