CVE-2008-2589

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_REPORT package that allows remote attackers to execute arbitrary SQL (PL/SQL) commands via the second argument to the SHOW procedure.

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
• http://secunia.com/advisories/31087Vendor Advisory
• http://secunia.com/advisories/31113Vendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
• http://www.securityfocus.com/archive/1/494410/100/0/threaded
• http://www.securitytracker.com/id?1020494
• http://www.vupen.com/english/advisories/2008/2109/referencesVendor Advisory
• http://www.vupen.com/english/advisories/2008/2115Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
• http://secunia.com/advisories/31087Vendor Advisory
• http://secunia.com/advisories/31113Vendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
• http://www.securityfocus.com/archive/1/494410/100/0/threaded
• http://www.securitytracker.com/id?1020494
• http://www.vupen.com/english/advisories/2008/2109/referencesVendor Advisory
• http://www.vupen.com/english/advisories/2008/2115Vendor Advisory

Published

Jul 15, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2583Unspecified vulnerability in the sample Discussion Forum Por…
• CVE-2008-2584Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-2585Unspecified vulnerability in the Oracle Report Manager compo…
• CVE-2008-2586Unspecified vulnerability in the Oracle Application Object L…
• CVE-2008-2587Unspecified vulnerability in the Advanced Replication compon…
• CVE-2008-2588Unspecified vulnerability in the Oracle JDeveloper component…
• CVE-2008-2590Unspecified vulnerability in the Instance Management compone…
• CVE-2008-2591Unspecified vulnerability in the Oracle Database Vault compo…
• CVE-2008-2592Unspecified vulnerability in the Advanced Replication compon…
• CVE-2008-2593Unspecified vulnerability in the Oracle Portal component in …
• CVE-2008-2594Unspecified vulnerability in the Oracle Portal component in …
• CVE-2008-2595Unspecified vulnerability in the Oracle Internet Directory c…