Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2005-3458: Oracle E-Business Suite workflow may be compromised

CVE-2005-3458 · published 21 years ago

Summary

The workflow component of Oracle E-Business Suite versions 11.0 through 11.5.9 has a flaw that could let an attacker interfere with business processes. Because the exact impact is not known, organizations should treat it as a potential risk. Apply any patches Oracle releases for this issue as soon as they become available and review workflow configurations for unexpected changes.

Original advisory text

Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.9 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS19 in Workflow Cartridge.

References

http://secunia.com/advisories/17250
http://www.kb.cert.org/vuls/id/210524 US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
http://www.securityfocus.com/bid/15134
http://www.us-cert.gov/cas/techalerts/TA05-292A.html US Government Resource

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

10.0 Critical

Exploitation

2% chance of attack within 30 days

Timeline

Published2 Nov 2005

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2005-3458 · NVD

Track software like this

Free during beta