CVE-2026-46834

The CVE-2026-46834 entry concerns Oracle Database Server’s Net Service component. Affected versions are 23.4.0 through 23.26.2. The vulnerability is remotely exploitable by an unauthenticated attacker over TLS, enabling a hang or frequent crash of Net Service (complete DOS) as described in the so...

CVE-2002-0856

The CVE-2002-0856 entry concerns the SQL*NET listener in Oracle Net for Oracle9i (versions 9.0.x and 9.2). The vulnerability is a denial-of-service caused by handling of certain debug requests in the debugging feature, which are not processed correctly, allowing remote attackers to crash the serv...

CVE-2005-3444

The CVE-2005-3444 entry concerns Oracle Database Server (8i–9.2.0.5) with multiple unspecified vulnerabilities in the Programmatic Interface. The description notes unknown impact and attack vectors. The CVSS data provided indicates a high-severity base score (10.0) with network attack vector and ...

CVE-2006-3699

CVE-2006-3699 affects Oracle Database Core RDBMS components in versions 9.0.1.5 and 9.2.0.6. The description remains: an unspecified vulnerability with unknown impact/attack vectors (aka Oracle Vuln# DB02). The connected Nessus entry lists this CVE among July 2006 CPU fixes but provides no furthe...

CVE-2007-0271

CVE-2007-0271 affects Oracle Database 9.0.1.5 and 9.2.0.7 in the Log Miner component (SYS.DBMS_LOGMNR). The description notes an alleged buffer overflow in ADD_LOGFILE within SYS.DBMS_LOGMNR that could allow code execution, with oracle not disputing the researcher claim. Connected documents also ...

CVE-2007-0273

No connected documents provide concrete technical details (affected product, component, root cause, impact, or remediation) for CVE-2007-0273 beyond the initial description. Technical specifics are not publicly available in the provided materials; monitor for updates.

CVE-2009-1007

CVE-2009-1007 affects Oracle Database (Data Mining component) in 10.2.0.4. The vulnerability allows an authenticated remote user to execute commands on SYS.DMP_SYS, impacting confidentiality, integrity, and availability (partial/Partial+). The CVSS base score in NVD is 6.5 (MEDIUM) with network a...

CVE-2006-3701

Technical details on CVE-2006-3701 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-3703

CVE-2006-3703 concerns InterMedia for Oracle Database across versions 9.0.1.5, 9.2.0.6, and 10.1.0.4. The description in the NVD entry characterizes this as an unspecified vulnerability with unknown impact and attack vectors, and the connected data confirms InterMedia as the affected component wi...

CVE-2006-3705

CVE-2006-3705 concerns Oracle Database 10.1.0.5 with two unnamed vulnerabilities (DB21: Statistics, DB22: Upgrade/Downgrade) that Oracle notes may be SQL injection in SYS.DBMS_STATS and SYS.DBMS_UPGRADE. The connected documents corroborate that these issues are related to SQL injection in SYS pac...

CVE-2006-5338

The CVE-2006-5338 entry concerns Oracle Database 10.1.0.5 Core RDBMS. The connected data confirms a vulnerability in the DBMS_SQLTUNE area (sys.dbms_sqltune or related internal components) that is associated with remote, authenticated access and is characterized by suspected SQL injection vectors...

CVE-2009-1965

CVE-2009-1965 affects Oracle Database Net Foundation Layer in 9.2.0.8 and 10.1.0.5. The vulnerability can be exploited remotely over the network via adjacent access, leading to partial confidentiality, integrity, and availability impacts. The Oracle October 2009 Critical Patch Update provides fix...

CVE-2002-1767

CVE-2002-1767 describes a buffer overflow in Oracle 8i Database Server 8.1.5 for Linux, specifically in tnslsnr, that allows local users to execute arbitrary code as the oracle user via a long command line argument. The affected component is the tnslsnr process; root cause is improper handling of...

CVE-2007-2118

The CVE-2007-2118 entry concerns Oracle Database Upgrade/Downgrade component vulnerabilities in 9.0.1.5 and 9.2.0.7. The description indicates an unspecified vulnerability with unknown impact/attack vectors, and a note that claims this may be a buffer overflow in the mig utility. No additional te...

CVE-2007-5508

CVE-2007-5508 concerns the CTXSYS Intermedia/Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3. The vulnerability enables SQL injection via six procedures (THEMES, GIST, TOKENS, FILTER, HIGHLIGHT, MARKUP), with remote authenticated users able to execute arbitrary SQL comman...

CVE-2012-0082

The CVE-2012-0082 entry concerns an unspecified vulnerability in Oracle Database Server's Core RDBMS component affecting multiple versions (10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.2–11.2.0.3). The vulnerability allows remote authenticated users to impact integrity and availability via unkno...

CVE-2006-5341

CVE-2006-5341 affects Oracle Database XMLDB component (versions 9.2.0.8, 10.1.0.5, 10.2.0.2). Reports describe two SQL injection vulnerabilities, DB14 in PITRIG_DROP/PITRIG_DROPMETADATA (XDB_PITRIG_PKG) and DB15 in DISABLE_HIERARCHY_INTERNAL (DBMS_XDBZ), exploitable by a remote, authenticated att...

CVE-2007-3858

Oracle Database 10.2.0.3 is affected by multiple unspecified vulnerabilities that allow remote authenticated users to impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11) and (2) Program Interface (DB13). The exact impact, affected subcomponents, and root cause details are not specified i...

CVE-2011-3511

Oracle Database Vault (Database Vault component) on 10gR2/11gR1/11gR2 is affected by CVE-2011-3511, where users with DV_ACCTMGR or SYSDBA can bypass protections and execute OCIPasswordChange to change any user’s password. Root cause relates to privileged account handling; advisory TeamSHATTER not...

CVE-2001-0515

CVE-2001-0515 concerns the Oracle Listener in Oracle 7.3 and 8i, where a remote attacker can cause a denial of service by sending a malformed connection packet with an excessively large offset_to_data value. The issue, characterized as part of a four-pronged set of Oracle Listener DoS vulnerabili...

CVE-2006-5343

This CVE (CVE-2006-5343) concerns Oracle Database Server 10.1.0.3, specifically the Database Scheduler component. The available description states an unspecified vulnerability in sys.dbms_scheduler with unknown impact and remote authenticated attack vectors. No concrete exploit details, affected ...

CVE-2007-1442

CVE-2007-1442 describes a local privilege escalation in Oracle Database 10g caused by passing a NULL pDacl parameter to SetSecurityDescriptorDacl when creating discretionary access control lists (DACLs). This can allow local users to gain privileges. The description and connected records confirm ...

CVE-2026-46835

The CVE-2026-46835 entry concerns Oracle Database Server’s Net Service component. Affected are Oracle versions 23.4.0 through 23.26.2. An unauthenticated attacker who can access the Net Service over TLS can cause the Net Service to hang or crash, resulting in a complete denial of service. The doc...

CVE-2025-30750

CVE-2025-30750 affects Oracle Database Server Unified Audit. Affected versions: 19.3–19.27, 21.3–21.18, 23.4–23.8. High-privileged attacker with Create User privilege and network access via Oracle Net can compromise Unified Audit; exploitation requires user interaction and may allow unauthorized ...

CVE-2025-50070

CVE-2025-50070 affects Oracle Database Server JDBC: vulnerable in JDBC component for Oracle Database Server versions 23.4–23.8. Root cause as described is a vulnerability in JDBC that can enable a low-privileged, authenticated OS user with logon to the infrastructure where JDBC runs to access JDB...

CVE-2025-50066

CVE-2025-50066 affects the Oracle Database Server’s Materialized View component. Affected versions are 19.3–19.27, 21.3–21.18, and 23.4–23.8. An attacker with Execute on DBMS_REDEFINITION and network access via Oracle Net can exploit this to gain unauthorized update/insert/delete access to data i...

CVE-2026-21939

Oracle Database Server SQLcl component vulnerability CVE-2026-21939 affects versions 23.4.0–23.26.0. An unauthenticated attacker with local logon and required user interaction can compromise SQLcl, potentially taking over the SQLcl process. Connected sources (Oracle Jan 2026 CPU, Red Hat advisori...

CVE-2026-71062

A HIGH-severity (CVSS 8.5) vulnerability in Oracle Database Server's RDBMS component (versions 23.4.0–23.26.3) allows a low-privileged authenticated attacker with network access via Oracle Net to compromise the RDBMS, with potential scope change to other products. Patch details are available in O...

CVE-2025-53047

CVE-2025-53047 affects Oracle Database Server’s Portable Clusterware. Affected versions are 19.3–19.28, 21.3–21.19, and 23.4–23.9. The issue allows an unauthenticated attacker with network access via Bonjour to read data from Portable Clusterware. The vulnerability is specifically tied to Portabl...

CVE-2025-53051

CVE-2025-53051 affects Oracle Database Server’s RDBMS Functional Index component, with affected versions 23.4–23.9. The vulnerability enables a high-privilege SYSDBA attacker, with network access via Oracle Net, to read a subset of RDBMS Functional Index data. The CVSS base score is 2.7 (LOW) wit...

CVE-2025-61749

CVE-2025-61749 affects the Unified Audit component of Oracle Database Server (versions 23.4–23.9). The issue allows a high-privilege attacker with DBA privileges and network access via Oracle Net to compromise Unified Audit, potentially enabling unauthorized update, insert, or delete of some data...