CVE-2009-3412

2010-01-1301:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-3412

unzip

oracle

database

application server

vulnerability

confidentiality

nvd

5.6 Medium

AI Score

Confidence

Low

1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:S/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect confidentiality via unknown vectors.

CPENameOperatorVersion
oracle:application_serveroracle application servereq10.1.2.3
oracle:database_serveroracle database servereq9.2.0.8
oracle:database_serveroracle database servereq9.2.0.8dv
oracle:database_serveroracle database servereq10.1.0.5

CPE	Name	Operator	Version
oracle:application_server	oracle application server	eq	10.1.2.3
oracle:database_server	oracle database server	eq	9.2.0.8
oracle:database_server	oracle database server	eq	9.2.0.8dv
oracle:database_server	oracle database server	eq	10.1.0.5