← Vulnerability feed

Vulnerability record · CVE-2008-5454 · published 14 January 2009

CVE-2008-5454: Oracle e-business suite 11i vulnerability

Oracle · E Business Suite 11i

Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

4.9 CVSS 2.0 Medium EPSS 0.90% · top 41.8%
4.9CVSS 2.0 base score
0.90%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the iProcurement component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

AV:N/AC:M/Au:S/C:P/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/33525
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021568
http://www.vupen.com/english/advisories/2009/0115
http://secunia.com/advisories/33525
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/bid/33177
http://www.securitytracker.com/id?1021568
http://www.vupen.com/english/advisories/2009/0115

Track CVE-2008-5454 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-1827Oracle e-business suite 11i vulnerabilityMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced P…EPSS 2.3%9.3CVE-2008-7233Oracle application server vulnerabilityUnspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows …EPSS 4.1%5.5CVE-2008-5458Oracle e-business suite vulnerabilityUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10 and CU2 allows remote authenticated u…EPSS 1.0%5.0CVE-2008-7239Oracle e-business suite 11i vulnerabilityMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 allow remote attackers to affect confidentiality via unknown vectors relate…EPSS 3.0%4.3CVE-2009-0995Oracle e-business suite vulnerabilityUnspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to af…EPSS 1.5%3.5CVE-2008-5446Oracle e-business suite vulnerabilityUnspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticate…EPSS 1.3%1.2CVE-2008-5450Oracle e-business suite vulnerabilityUnspecified vulnerability in the Oracle Applications Platform Engineering component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows local us…EPSS 0.31%

Source: NIST National Vulnerability Database (record CVE-2008-5454), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.