CVE-2007-2120

HIGH 7.8CVE-2007-2120 · Published 18/04/2007 · updated 16/06/2026

In short

CVE-2007-2120 is a HIGH (CVSS 7.8) vulnerability affecting application server (oracle).
Chance of exploitation in the next 30 days (EPSS): 3.0%, higher than 87.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
application server oracle	`= 10.1.2.0.2= 10.1.2.2= 9.0.4.3`	No fix yet

Description

The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01.

References

More vulnerabilities in application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

application server

oracle

= 10.1.2.0.2= 10.1.2.2= 9.0.4.3

No fix yet

More vulnerabilities in application server

See all →