CVE-2006-3708
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2...
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
Exploit likelihood
What each source reports
NVD Score used
10.0
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
CVE-2006-3708- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
CVE-2006-3708- Updated
- 2026-11-02
EUVDEUVD-2006-3702 No score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
EUVD-2006-3702- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6h35-g8x6-wv9p No score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2...
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
GHSA-6h35-g8x6-wv9p- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3708 is a high vulnerability (CVSS 10.0) in Oracle Application Server, published July 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.28%, the 92nd percentile. No source names a fixed version.
References
securitytracker.com/id?1016529
securityfocus.com/bid/19054
exchange.xforce.ibmcloud.com/vulnerabilities/27897
secunia.com/advisories/21165
securityfocus.com/archive/1/440758/100/100/threaded
vupen.com/english/advisories/2006/2947
Show 7 moreShow less
red-database-security.com/advisory/oracle_cpu_july_2006.html
us-cert.gov/cas/techalerts/TA06-200A.html
secunia.com/advisories/21111
oracle.com/technetwork/topics/security/cpujul2006-101315.html
vupen.com/english/advisories/2006/2863
nvd.nist.gov/vuln/detail/CVE-2006-3708
github.com/advisories/GHSA-6h35-g8x6-wv9p