CVE-2009-3737

HIGH · CVSS 9.3 EPSS 3.95%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-08-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-3737

Severity

HIGH

CVSS

9.3

EPSS

3.95%

Oracle

Original NVD Description

The Oracle Siebel Option Pack for IE ActiveX control does not properly initialize memory that is used by the NewBusObj method, which allows remote attackers to execute arbitrary code via a crafted HTML document.