CVE-2007-0280: Oracle Application Server

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OPMN01 is for a buffer overflow in Oracle Notification Service (ONS).

Affected products

• Oracle Application Server: version 9.0.4.3 only; version 10.1.2.0.2 only; version 10.1.2.2 only
• Oracle Collaboration Suite: version 9.0.4.2 only; version 10.1.2 only
• Oracle HTTP Server: version 9.0.1.5 only

Published 2007-01-17. Last modified 2026-06-16.