CVE-2006-3708
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2...
CVE-2006-3708 is a high vulnerability (CVSS 10.0) in Oracle Application Server, published July 19, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.28%, the 92nd percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 5.28%EPSS, 92nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
Exploit likelihood
Affected products
What each source reports
NVD Score used 10.0
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
CVE-2006-3708- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
CVE-2006-3708- Updated
- 2026-11-02
EUVDEUVD-2006-3702No score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
EUVD-2006-3702- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6h35-g8x6-wv9pNo score
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2...
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
- Record
GHSA-6h35-g8x6-wv9p- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1016529
securityfocus.com/bid/19054
exchange.xforce.ibmcloud.com/vulnerabilities/27897
secunia.com/advisories/21165
securityfocus.com/archive/1/440758/100/100/threaded
vupen.com/english/advisories/2006/2947
Show 7 moreShow less
red-database-security.com/advisory/oracle_cpu_july_2006.html
us-cert.gov/cas/techalerts/TA06-200A.html
secunia.com/advisories/21111
oracle.com/technetwork/topics/security/cpujul2006-101315.html
vupen.com/english/advisories/2006/2863
nvd.nist.gov/vuln/detail/CVE-2006-3708
github.com/advisories/GHSA-6h35-g8x6-wv9p