Lucene search
HistoryJan 06, 2005 - 5:00 a.m.
CVE-2004-1339
cve-2004-1339
sql injection
oracle
9i
10g
vulnerability
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.6%
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Affected configurations
Node
oracledatabase_serverMatch10.2.1r2
ORoracleoracle9iMatch9.0
ORoracleoracle9iMatch9.0.1
ORoracleoracle9iMatch9.0.1.2
ORoracleoracle9iMatch9.0.1.3
ORoracleoracle9iMatch9.0.1.4
ORoracleoracle9iMatch9.0.2
ORoracleoracle9iMatch9.0.2.0.0
ORoracleoracle9iMatch9.0.2.0.1
ORoracleoracle9iMatch9.0.2.1
ORoracleoracle9iMatch9.0.2.2
ORoracleoracle9iMatch9.0.2.3
ORoracleoracle9iMatch9.2.0.1
ORoracleoracle9iMatch9.2.0.2
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
36.6%
Related for CVE-2004-1339