CVE-2009-1998: Oracle Industry Applications

Medium severity, CVSS 4.9. EPSS: 1.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected products

• Oracle Industry Applications: version 2.8.0 only; version 6.2.0 only; version 6.3.0 only; version 6.3.1 only

Published 2009-10-22. Last modified 2026-06-16.