[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feSyTQCEOlwr79FezBRhUxXCVTuwvYqjI7GfG7Zg7-9w":3,"g5a-risk:CVE-2008-2138":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":81,"weaknesses":82,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":120,"notableEvents":121},"CVE-2008-2138","What is CVE-2008-2138?","Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of \u002Fdav_portal\u002Fportal\u002F by sending a request containing a trailing \"%0A\" (encoded line feed), then using the session ID that is generated from that request.  NOTE: as of 20080512, Oracle has not commented on the accuracy of this report.","Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of \u002Fdav_portal\u002Fportal\u002F b...","2008-05-12T16:20:00","2026-06-16T22:53:10.66",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,2.9,false,[],0.15508,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"oracle","application_server_portal","10g","cpe:2.3:a:oracle:application_server_portal:10g:*:*:*:*:*:*:*",1,[45,49,53,57,61,65,69,71,73,75,77,79],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F30140","Secunia",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3867","Securityreason",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F491865\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":58,"source":55,"tags":59},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F29119",[60],"Exploit",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1020034","Securitytracker",[],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F42302","Ibmcloud",[],{"url":46,"source":47,"tags":70},[],{"url":50,"source":51,"tags":72},[],{"url":54,"source":55,"tags":74},[],{"url":58,"source":55,"tags":76},[60],{"url":62,"source":63,"tags":78},[],{"url":66,"source":67,"tags":80},[],12,[83],{"id":84,"name":84,"description":85},"Unknown","CWE-264",[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2008-2138? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-2138, a medium severity cyber security vulnerability from 2008. Oracle Application Server (OracleAS) Portal 10g allows rem...","CVE-2008-2138, CVE-2008-2138 vulnerability, CVE-2008-2138 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, oracle security, application_server_portal vulnerability","\u002Fwhat-is\u002Fcve-2008-2138",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-2138","Cybersecurity","CVE-2008-2138, CVE-2008-2138 vulnerability, CVE-2008-2138 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":28,"Negate":28,"Nodes":114},[115],{"Operator":116,"Negate":32,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AA321251-DA7D-4D75-97FB-08EB405152AE",[],[122],{"id":123,"eventType":124,"eventTime":125,"details":126,"label":127,"color":128},"73579ac5-3860-468c-b4c5-b1f8c1cca770","LOW_EPSS_DELTA","2026-06-16T04:07:05.446301+00:00","Daily EPSS score decreased by 0.269 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":130,"version":22},1792264128875,{"score":132,"band":36,"action":133,"scoredAt":134},40,"Plan remediation","2026-10-17T06:35:51.78804+00:00"]