CVE-2009-0989

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0990.

Metrics

CVSS 2.0 5.5/10AV:N/AC:L/Au:S/C:P/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/53742Broken Link
http://secunia.com/advisories/34693Permissions Required
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/34461Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022055Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlThird Party Advisory, US Government Resource
http://osvdb.org/53742Broken Link
http://secunia.com/advisories/34693Permissions Required
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/34461Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1022055Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlThird Party Advisory, US Government Resource

Timeline

Published: Apr 15, 2009
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2009

CVE-2009-09905.5Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authent CVE-2009-09915.0Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at CVE-2009-09925.5Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated CVE-2009-09937.5Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, int CVE-2009-09944.0Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remo CVE-2009-09954.3Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attack CVE-2009-09964.0Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote auth CVE-2009-09974.0Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidenti CVE-2009-09985.5Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseO CVE-2009-09996.8Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to af CVE-2009-10007.5The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Appli CVE-2009-100016.1A vulnerability classified as problematic was found in jianlinwei cool-php-captcha up to 0.2. This vulnerability affects unknown code of the