Oracle Application Server 9i vulnerabilities

2 CVEs affecting Oracle Application Server 9i, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1825, published 2008-04-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0347, published 2008-01-17. High severity, CVSS 10.0. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10.1.2.0.2; has…
CVE-2008-1825, published 2008-04-16. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03.