CVE-2007-2120 : The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2,

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.

Published 2007-04-18 18:19:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-2120

Oracle » Application Server » Version: 10.1.2.0.2
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*
Matching versions
Oracle » Application Server » Version: 9.0.4.3
cpe:2.3:a:oracle:application_server:9.0.4.3:*:*:*:*:*:*:*
Matching versions
Oracle » Application Server » Version: 10.1.2.2
cpe:2.3:a:oracle:application_server:10.1.2.2:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2007-2120

Top countries where our scanners detected CVE-2007-2120

Top open port discovered on systems with this issue 8889

IPs affected by CVE-2007-2120 1,060

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2007-2120!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2007-2120

EPSS FAQ

3.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2120

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2007-2120

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-2120