CVE-2008-5446

no score yetEPSS 1.3%

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the "About Us Page" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
Published: 2009-01-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:e-business_suite
oracle:e-business_suite_12

References

http://secniche.org/papers/orabs.pdf
http://secunia.com/advisories/33525
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/archive/1/500171/100/0/threaded
http://www.securityfocus.com/bid/33177

Check your stack JSON