Oracle Application Server vulnerabilities

4 CVEs affecting Oracle Application Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2614, published 2008-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2594, published 2008-07-15. Medium severity, CVSS 6.4. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593.
CVE-2008-2609, published 2008-07-15. Medium severity, CVSS 6.4. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.
CVE-2008-2612, published 2008-07-15. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors.
CVE-2008-2614, published 2008-07-15. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors.