Oracle Portal Component vulnerabilities

3 CVEs affecting Oracle Portal Component, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2609, published 2008-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2589, published 2008-07-15. Medium severity, CVSS 6.4. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was…
CVE-2008-2609, published 2008-07-15. Medium severity, CVSS 6.4. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.
CVE-2008-2583, published 2008-07-15. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote…