CVE-2007-3866 Other in n/a

High 7.5 Published 18 Jul 2007 Updated 7 Aug 2024

Remote attackers can exploit unspecified vulnerabilities in multiple Oracle E-Business Suite modules, potentially compromising the application.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2007-3866?

CVE-2007-3866 is a high-severity vulnerability in Oracle E-Business Suite, published on 18 Jul 2007. It can be exploited over the network.

Official description

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via (a) Oracle Configurator (APPS02), (b) Oracle iExpenses (APPS03), (c) Oracle Application Object Library (APPS09), and (1) APPS12, (2) APPS13, and (3) APPS14 in (d) Oracle Payables.

Which versions are affected by CVE-2007-3866?

It affects 1 product.

Products include Oracle E-Business Suite.

How do I fix CVE-2007-3866?

No fix has been published for CVE-2007-3866 yet. Limit exposure of the affected software until one is available.

Is CVE-2007-3866 being exploited?

There is no known exploitation of CVE-2007-3866 in the wild and no public exploit code.

All Oracle E-Business Suite vulnerabilities

Sources

Also known as GHSA-88m4-p3vv-26ch.