PT-2007-3477

CVE-2007-2135

·

Published

2007-04-24

·

Updated

2018-10-16

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
The ADI BINARY component in the Oracle E-Business Suite allows remote attackers to download arbitrary documents from the APPS.FND DOCUMENTS table via the ADI DISPLAY REPORT function, when passed a certain parameter. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126, CVE-2007-2127, or CVE-2007-2128.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2007-2135
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com