CVE-2007-3864

HIGH 7.5CVE-2007-3864 · Published 18/07/2007 · updated 16/06/2026

In short

CVE-2007-3864 is a HIGH (CVSS 7.5) vulnerability affecting collaboration suite (oracle).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
collaboration suite oracle	`= 10.1.2`	No fix yet

Description

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via (1) Instant Messaging/Presence (OCS01) and (2) Oracle Single Sign On (AS02).

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
secunia.com/advisories/26114 · Vendor Advisory
secunia.com/advisories/26166
integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
oracle.com/technetwork/topics/security/cpujul2007-087014.html
red-database-security.com/advisory/oracle_cpu_jul_2007.html
securitytracker.com/id
us-cert.gov/cas/techalerts/TA07-200A.html · US Government Resource
vupen.com/english/advisories/2007/2562
vupen.com/english/advisories/2007/2635
exchange.xforce.ibmcloud.com/vulnerabilities/35490

More vulnerabilities in collaboration suite

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free