CVE-2009-1997

CVE-2009-1997 concerns Oracle Database 10.2.0.3 and 11.1.0.7, with an unspecified vulnerability in the Authentication component (Oracle Net). It is remotely exploitable and can affect confidentiality via unknown vectors. The Oracle Database risk matrix lists this under the “Authentication” catego...

CVE-2006-3705

CVE-2006-3705 concerns Oracle Database 10.1.0.5 with two unnamed vulnerabilities (DB21: Statistics, DB22: Upgrade/Downgrade) that Oracle notes may be SQL injection in SYS.DBMS_STATS and SYS.DBMS_UPGRADE. The connected documents corroborate that these issues are related to SQL injection in SYS pac...

CVE-2007-0277

CVE-2007-0277 concerns Oracle Database client-only 10.1.0.4 with an unspecified vulnerability tied to the Export component (expdp/impdp). The connected documents collectively indicate the issue has unknown impact and attack vectors, with no concrete exploit details or remediation/version informat...

CVE-2007-2118

The CVE-2007-2118 entry concerns Oracle Database Upgrade/Downgrade component vulnerabilities in 9.0.1.5 and 9.2.0.7. The description indicates an unspecified vulnerability with unknown impact/attack vectors, and a note that claims this may be a buffer overflow in the mig utility. No additional te...

CVE-2007-5554

CVE-2007-5554 involves Oracle database servers where remote attackers can obtain server memory contents via crafted packets (Oracle reference number 7892711). The connected documents do not specify affected versions or concrete exploitation details. No remediation or mitigations are provided in t...

CVE-2006-3701

Technical details on CVE-2006-3701 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-0271

CVE-2007-0271 affects Oracle Database 9.0.1.5 and 9.2.0.7 in the Log Miner component (SYS.DBMS_LOGMNR). The description notes an alleged buffer overflow in ADD_LOGFILE within SYS.DBMS_LOGMNR that could allow code execution, with oracle not disputing the researcher claim. Connected documents also ...

CVE-2007-0273

No connected documents provide concrete technical details (affected product, component, root cause, impact, or remediation) for CVE-2007-0273 beyond the initial description. Technical specifics are not publicly available in the provided materials; monitor for updates.

CVE-2007-5508

CVE-2007-5508 concerns the CTXSYS Intermedia/Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3. The vulnerability enables SQL injection via six procedures (THEMES, GIST, TOKENS, FILTER, HIGHLIGHT, MARKUP), with remote authenticated users able to execute arbitrary SQL comman...

CVE-2012-0082

The CVE-2012-0082 entry concerns an unspecified vulnerability in Oracle Database Server's Core RDBMS component affecting multiple versions (10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.2–11.2.0.3). The vulnerability allows remote authenticated users to impact integrity and availability via unkno...

CVE-2012-0519

CVE-2012-0519 is an Oracle issue affecting the Core RDBMS in Oracle Database Server 11.2.0.2 on Windows. The vulnerability is described as an unspecified issue that allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Connected sources refe...

CVE-2001-0515

CVE-2001-0515 concerns the Oracle Listener in Oracle 7.3 and 8i, where a remote attacker can cause a denial of service by sending a malformed connection packet with an excessively large offset_to_data value. The issue, characterized as part of a four-pronged set of Oracle Listener DoS vulnerabili...

CVE-2007-3858

Oracle Database 10.2.0.3 is affected by multiple unspecified vulnerabilities that allow remote authenticated users to impact via (1) EXFSYS.DBMS_RLMGR_UTL in Rules Manager (DB11) and (2) Program Interface (DB13). The exact impact, affected subcomponents, and root cause details are not specified i...

CVE-2009-1007

CVE-2009-1007 affects Oracle Database (Data Mining component) in 10.2.0.4. The vulnerability allows an authenticated remote user to execute commands on SYS.DMP_SYS, impacting confidentiality, integrity, and availability (partial/Partial+). The CVSS base score in NVD is 6.5 (MEDIUM) with network a...

CVE-2006-5341

CVE-2006-5341 affects Oracle Database XMLDB component (versions 9.2.0.8, 10.1.0.5, 10.2.0.2). Reports describe two SQL injection vulnerabilities, DB14 in PITRIG_DROP/PITRIG_DROPMETADATA (XDB_PITRIG_PKG) and DB15 in DISABLE_HIERARCHY_INTERNAL (DBMS_XDBZ), exploitable by a remote, authenticated att...

CVE-2011-3511

Oracle Database Vault (Database Vault component) on 10gR2/11gR1/11gR2 is affected by CVE-2011-3511, where users with DV_ACCTMGR or SYSDBA can bypass protections and execute OCIPasswordChange to change any user’s password. Root cause relates to privileged account handling; advisory TeamSHATTER not...

CVE-2006-5343

This CVE (CVE-2006-5343) concerns Oracle Database Server 10.1.0.3, specifically the Database Scheduler component. The available description states an unspecified vulnerability in sys.dbms_scheduler with unknown impact and remote authenticated attack vectors. No concrete exploit details, affected ...

CVE-2007-1442

CVE-2007-1442 describes a local privilege escalation in Oracle Database 10g caused by passing a NULL pDacl parameter to SetSecurityDescriptorDacl when creating discretionary access control lists (DACLs). This can allow local users to gain privileges. The description and connected records confirm ...

CVE-2026-46835

The CVE-2026-46835 entry concerns Oracle Database Server’s Net Service component. Affected are Oracle versions 23.4.0 through 23.26.2. An unauthenticated attacker who can access the Net Service over TLS can cause the Net Service to hang or crash, resulting in a complete denial of service. The doc...

CVE-2025-50070

CVE-2025-50070 affects Oracle Database Server JDBC: vulnerable in JDBC component for Oracle Database Server versions 23.4–23.8. Root cause as described is a vulnerability in JDBC that can enable a low-privileged, authenticated OS user with logon to the infrastructure where JDBC runs to access JDB...

CVE-2026-71063

Oracle Portable Clusterware (Database Server versions 19.3–19.32, 21.3–21.23, 23.4.0–23.26.3) has a critical (CVSS 9.6) flaw allowing unauthenticated attackers on the adjacent physical segment to take over Clusterware and affect other products. Oracle's August 2026 CPU (cspuaug2026.html) is the p...

CVE-2026-71100

CVE-2026-71100 affects Oracle Database Server's RDBMS component across versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with network access via Oracle Net can exploit it to read a subset of database data. CVSS 3.1 score is 5.3 (MEDIUM). Oracle's August 2026 CPU adv...

CVE-2025-30750

CVE-2025-30750 affects Oracle Database Server Unified Audit. Affected versions: 19.3–19.27, 21.3–21.18, 23.4–23.8. High-privileged attacker with Create User privilege and network access via Oracle Net can compromise Unified Audit; exploitation requires user interaction and may allow unauthorized ...

CVE-2025-50066

CVE-2025-50066 affects the Oracle Database Server’s Materialized View component. Affected versions are 19.3–19.27, 21.3–21.18, and 23.4–23.8. An attacker with Execute on DBMS_REDEFINITION and network access via Oracle Net can exploit this to gain unauthorized update/insert/delete access to data i...

CVE-2026-71064

A critical (CVSS 9.6) unauthenticated vulnerability in Oracle Database Server's Portable Clusterware component affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An attacker on the adjacent network segment can take over Portable Clusterware with scope change impacting other products. No...

CVE-2026-71102

Oracle Database Server Portable Clusterware is affected in versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3. An unauthenticated remote attacker can exploit it via HTTP to gain unauthorized data modification/creation/deletion and cause a complete denial of service (hang or crash). CVSS 3.1 scor...

CVE-2025-53047

CVE-2025-53047 affects Oracle Database Server’s Portable Clusterware. Affected versions are 19.3–19.28, 21.3–21.19, and 23.4–23.9. The issue allows an unauthenticated attacker with network access via Bonjour to read data from Portable Clusterware. The vulnerability is specifically tied to Portabl...

CVE-2026-21939

Oracle Database Server SQLcl component vulnerability CVE-2026-21939 affects versions 23.4.0–23.26.0. An unauthenticated attacker with local logon and required user interaction can compromise SQLcl, potentially taking over the SQLcl process. Connected sources (Oracle Jan 2026 CPU, Red Hat advisori...

CVE-2025-53051

CVE-2025-53051 affects Oracle Database Server’s RDBMS Functional Index component, with affected versions 23.4–23.9. The vulnerability enables a high-privilege SYSDBA attacker, with network access via Oracle Net, to read a subset of RDBMS Functional Index data. The CVSS base score is 2.7 (LOW) wit...

CVE-2025-61749

CVE-2025-61749 affects the Unified Audit component of Oracle Database Server (versions 23.4–23.9). The issue allows a high-privilege attacker with DBA privileges and network access via Oracle Net to compromise Unified Audit, potentially enabling unauthorized update, insert, or delete of some data...

CVE-2026-71062

A HIGH-severity (CVSS 8.5) vulnerability in Oracle Database Server's RDBMS component (versions 23.4.0–23.26.3) allows a low-privileged authenticated attacker with network access via Oracle Net to compromise the RDBMS, with potential scope change to other products. Patch details are available in O...