Security readout for executives and security teams
This is an old Oracle PeopleSoft Enterprise Portal issue from the July 2006 Oracle CPU. Public sources do not describe what an attacker could do or how the flaw is reached. Treat it as an exposure-management item for any remaining PeopleSoft Enterprise Portal 8.8 or 8.9 deployment matching the named bundles. Exposure is limited to organizations that still operate the named PeopleSoft Enterprise Portal versions and bundle levels. Because details are sparse, asset inventory and Oracle patch history are the primary ways to determine relevance. Prioritize verification over emergency response. The issue is old and underspecified, with no active exploitation evidence in the provided sources, but lingering legacy enterprise portals can carry concentrated business risk if unpatched. Mitigation focus: Check Oracle July 2006 CPU guidance for PeopleSoft Enterprise Portal applicability.; Apply the vendor-recommended PeopleSoft Enterprise Portal update if the product and bundle match.; If unsupported, prioritize upgrade or retirement planning with the application owner..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2006-3723 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- oracle-cpu-july-2006(27897)CVE reference · vdb-entry, x_refsource_XF
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.