CVE-2007-3861: Oracle Application Server

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have an unknown impact via custom applications that use JBO.KEY, aka JDEV01.

Affected products

• Oracle Application Server: version 10.1.2.2 only
• Oracle Collaboration Suite: version 10.1.2 only

Published 2007-07-18. Last modified 2026-06-16.