CVE-2007-2123
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1...
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
- Record
CVE-2007-2123- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
- Record
CVE-2007-2123- Updated
- 2026-11-02
EUVDEUVD-2007-2118 No score
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
- Record
EUVD-2007-2118- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3w6x-g2w9-f5ph No score
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1...
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
- Record
GHSA-3w6x-g2w9-f5ph- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2123 is a high vulnerability (CVSS 10.0) in Oracle Application Server, published April 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.24%, the 82nd percentile. No source names a fixed version.
References
us-cert.gov/cas/techalerts/TA07-108A.html
oracle.com/technetwork/topics/security/cpuapr2007-090632.html
securityfocus.com/bid/23532
securitytracker.com/id?1017927
red-database-security.com/advisory/oracle_cpu_apr_2007.html
vupen.com/english/advisories/2007/1426
nvd.nist.gov/vuln/detail/CVE-2007-2123
github.com/advisories/GHSA-3w6x-g2w9-f5ph