{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Oracle Application Server 10g (9.0.4), pour la version 9.0.4.3 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle9i Database, pour la version 9.0.1.5 FIPS+ ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle PeopleSoft Enterprise PeopleTools, pour les versions 8.22, 8.47, 8.48 et 8.49 ;","product":{"name":"PeopleSoft","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle E-Business Suite Release 12, pour les versions 12.0.0 et 12.0.1 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Application Server 10g Release 3 (10.1.3), pour les versions 10.1.3.0.0, 10.1.3.1.0, 10.1.3.2.0 et 10.1.3.3.0 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle PeopleSoft Enterprise Human Capital Management, pour les versions 8.9 et 9.0 ;","product":{"name":"PeopleSoft","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Application Server 10g Release 2 (10.1.2), pour les versions 10.1.2.0.1 \u00e0 10.1.2.0.2, 10.1.2.1.0 et 10.1.2.2.0 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Database 10g, pour la version 10.1.0.5 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle 10g Collaboration Suite, pour la version 10.1.2 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Application Express (aussi appel\u00e9 HTML DB), pour les versions 1.5 \u00e0 2.2 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Database 10g Release 2, pour les versions 10.2.0.2 et 10.2.0.3 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle9i Application Server Release 1, pour la version 1.0.2.2 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle9i Database Release 2, pour les versions 9.2.0.7, 9.2.0.8 et 9.2.0.8DV ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle PeopleSoft Enterprise Customer Relationship Management, pour les versions 8.9 et 9.0.","product":{"name":"PeopleSoft","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle E-Business Suite Release 11i, pour les versions 11.5.8 \u00e0 11.5.10 CU2 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}},{"description":"Oracle Secure Enterprise Search 10g, pour les versions 10.1.6 et 10.1.8 ;","product":{"name":"N/A","vendor":{"name":"Oracle","scada":false}}}],"affected_systems_content":null,"content":"## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s dans les produits Oracle peuvent \u00eatre\nexploit\u00e9es par un utilisateur malintentionn\u00e9, pour compromettre\nlocalement ou \u00e0 distance un syst\u00e8me \u00e9quip\u00e9 des produits vuln\u00e9rables.\n\nL'exploitation de certaines d'entre elles n'exige pas l'authentification\nde l'utilisateur.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2007-3862","url":"https://www.cve.org/CVERecord?id=CVE-2007-3862"},{"name":"CVE-2007-3867","url":"https://www.cve.org/CVERecord?id=CVE-2007-3867"},{"name":"CVE-2007-3854","url":"https://www.cve.org/CVERecord?id=CVE-2007-3854"},{"name":"CVE-2007-3864","url":"https://www.cve.org/CVERecord?id=CVE-2007-3864"},{"name":"CVE-2007-3855","url":"https://www.cve.org/CVERecord?id=CVE-2007-3855"},{"name":"CVE-2007-3857","url":"https://www.cve.org/CVERecord?id=CVE-2007-3857"},{"name":"CVE-2007-3853","url":"https://www.cve.org/CVERecord?id=CVE-2007-3853"},{"name":"CVE-2007-3866","url":"https://www.cve.org/CVERecord?id=CVE-2007-3866"},{"name":"CVE-2007-3859","url":"https://www.cve.org/CVERecord?id=CVE-2007-3859"},{"name":"CVE-2007-3858","url":"https://www.cve.org/CVERecord?id=CVE-2007-3858"},{"name":"CVE-2007-3861","url":"https://www.cve.org/CVERecord?id=CVE-2007-3861"},{"name":"CVE-2007-3863","url":"https://www.cve.org/CVERecord?id=CVE-2007-3863"},{"name":"CVE-2007-3869","url":"https://www.cve.org/CVERecord?id=CVE-2007-3869"},{"name":"CVE-2007-3856","url":"https://www.cve.org/CVERecord?id=CVE-2007-3856"},{"name":"CVE-2007-3865","url":"https://www.cve.org/CVERecord?id=CVE-2007-3865"},{"name":"CVE-2007-3870","url":"https://www.cve.org/CVERecord?id=CVE-2007-3870"},{"name":"CVE-2007-3860","url":"https://www.cve.org/CVERecord?id=CVE-2007-3860"},{"name":"CVE-2007-3868","url":"https://www.cve.org/CVERecord?id=CVE-2007-3868"}],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 Oracle Critical    Patch Update (CPU) du 17 juillet 2007 :","url":"http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujul2007.html"}],"reference":"CERTA-2007-AVI-311","revisions":[{"description":"version initiale.","revision_date":"2007-07-18T00:00:00.000000"},{"description":"ajout des nombreuses r\u00e9f\u00e9rences CVE.","revision_date":"2007-07-19T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"Plusieurs vuln\u00e9rabilit\u00e9s dans les produits Oracle peuvent \u00eatre\nexploit\u00e9es par un utilisateur malintentionn\u00e9, pour compromettre\nlocalement ou \u00e0 distance un syst\u00e8me \u00e9quip\u00e9 des produits vuln\u00e9rables.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Oracle","vendor_advisories":[{"published_at":null,"title":"Mises \u00e0 jour critiques Oracle de juillet 2007","url":null}]}