CVE-2008-7238: Oracle E-Business Suite

Medium severity, CVSS 6.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow (1) local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component (APP01); (2) remote attackers to affect confidentiality via unknown vectors related to the Oracle Applications Framework (APP03); remote authenticated users to affect confidentiality and integrity via unknown vectors related to the (3) CRM Technical Foundation (APP05) and (4) Oracle Application Object Library (APP06); and remote authenticated users to affect integrity and availability via unknown vectors related to (5) Oracle Applications Technology Stack (APP07).

Affected products

• Oracle E-Business Suite: version 12.0.3 only

Published 2009-09-14. Last modified 2026-06-16.