CVE-2007-2170 - CERT CVE
ID CVE-2007-2170
Sažetak The APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Reference
CVSS
Base: 9.4
Impact: 9.2
Exploitability:10.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE COMPLETE COMPLETE
CVSS vektor AV:N/AC:L/Au:N/C:N/I:C/A:C
Zadnje važnije ažuriranje 16-10-2018 - 16:42
Objavljeno 24-04-2007 - 20:19