CVE-2007-2130: Oracle Application Server

High severity, CVSS 9.0. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01.

Affected products

• Oracle Application Server: version 9.0.4.3 only; version 10.1.2.0.2 only
• Oracle Collaboration Suite: version 10.1.2 only
• Oracle Database Server: version 9.2.0.1 only; version 10.1.0.2 only; version 10.2.0.1 only
• Oracle E-Business Suite: any version

Published 2007-04-18. Last modified 2026-06-16.