CVE-2007-2120
oracle application server: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- oracle:application_server
References
- http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html
- http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html
- http://www.red-database-security.com/advisory/oracle_discoverer_servlet.html
- http://www.securityfocus.com/archive/1/466160/100/0/threaded
- http://www.securityfocus.com/archive/1/466329/100/200/threaded