CVE-2008-2600

2008-07-1523:41:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

oracle

database

vulnerability

cve-2008-2600

spatial component

authentication

attack vectors

5.7 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.3%

JSON

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP.

CPENameOperatorVersion
oracle:database_serveroracle database servereq10.2.0.3
oracle:oracle_databaseoracle oracle databaseeq11.1.0.6
oracle:spatial_componentoracle spatial componenteq*
oracle:database_serveroracle database servereq10.1.0.5

CPE	Name	Operator	Version
oracle:database_server	oracle database server	eq	10.2.0.3
oracle:oracle_database	oracle oracle database	eq	11.1.0.6
oracle:spatial_component	oracle spatial component	eq	*
oracle:database_server	oracle database server	eq	10.1.0.5