Collaboration Suite

Vendor:

First CVE: Aug 4, 2004 · Active for 21 years

63
Total CVEs
More Total CVEs than 99% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Collaboration Suite over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 4, 2004
21 years ago
Most Recent CVE
Apr 14, 2010
5,949 days ago

CVE Severity & Scoring

Collaboration Suite63 CVEs
All CVEs353,173 CVEs
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network1 (1.6%)
Unknown62 (98.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (1.6%)
High0 (0.0%)
Unknown62 (98.4%)
User Interaction
None1 (1.6%)
Unknown62 (98.4%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (1.6%)
Unknown62 (98.4%)

Top CVEs

Signals from CVEs in this product scope (63 CVEs).

63 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2004-1364HIGH
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
Aug 4, 20048.537NOYES
CVE-2004-1363CRITICAL
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check
Aug 4, 20049.833NONO
CVE-2004-1371HIGH
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
Aug 4, 20049.032NONO
CVE-2006-0283HIGH
Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact
Jan 18, 200610.030NONO
CVE-2008-0347HIGH
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application Server 9.0.4.3 and 10
Jan 17, 200810.028NONO
CVE-2006-0282HIGH
Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, and Collaboration Su
Jan 18, 200610.028NONO
CVE-2006-0290HIGH
Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suit
Jan 18, 200610.028NONO
CVE-2006-0291HIGH
Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-B
Jan 18, 200610.028NONO
CVE-2008-1814HIGH
Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application
Apr 16, 20089.027NONO
CVE-2006-3715HIGH
Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01.
Jul 21, 200610.026NONO
View all 63 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (63 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
1.6% of CVEs· 85th percentile

Social Chatter

Signals from CVEs in this product scope (63 CVEs).

Media Mentions

Signals from CVEs in this product scope (63 CVEs).

Top CNAs Publishing CVEs For Collaboration Suite

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
release_1106.68.4%01
9.0.4.2238.23.3%00
10.1.2.414.32.1%00
10.1.2.1110.04.6%00
10.1.2.067.52.7%00
10.1.2347.82.4%00
10.1.139.24.4%00