CVE-2008-3986
Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors.
Date published : 2008-10-14
http://www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html