CVE-2015-4794

CVE-2015-4794 affects Oracle Database Server Java VM in versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability involves the Java VM component and allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The provided documents do not speci...

CVE-2009-1019

CVE-2009-1019 is an Oracle Database vulnerability affecting the Network Authentication component (Oracle Net) on 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. The issue is described as an unspecified remote vulnerability that may affect confidentiality, integrity, and availability via unk...

CVE-2018-3110

CVE-2018-3110 affects Oracle Database Server’s Java VM component. Affected versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, and 18. An attacker with Create Session privilege and network access via Oracle Net can remotely exploit to take over the Java VM; impact may extend to other products. CVSSv3 base sc...

CVE-2014-6567

CVE-2014-6567 affects Oracle Database Server in multiple 11.x/12.x versions (11.1.0.7, 11.2.0.3/4, 12.1.0.1/2) and is described as an unspecified core RDBMS vulnerability. The note references a researcher’s claim of a stack-based buffer overflow in DBMS_AW.EXECUTE that could enable code execution...

CVE-2008-1813

CVE-2008-1813 covers multiple unspecified vulnerabilities in Oracle Database versions 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The description notes remote unauthenticated or authenticated attack vectors affecting several components: SYS.DBMS_AQ (Advanced Queuing), Core RDBMS, S...

CVE-2009-1970

Technical details for CVE-2009-1970 are not publicly provided in the supplied documents. Monitor for updates on affected products, versions, impact, and fixes.

CVE-2008-2607

CVE-2008-2607 concerns Oracle Database Advanced Queuing (SYS.DBMS_AQELM). The CVE entry notes an unspecified vulnerability in Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 with remote authenticated attack vectors related to SYS.DBMS_AQELM. The public material refer...

CVE-2010-0911

CVE-2010-0911 : The Oracle Database Server Listener component is affected by an unspecified vulnerability that allows remote attackers to impact availability via unknown vectors. The CVE is documented with a base CVSS v2 score of 7.8 (HIGH), attack vector Network, no authentication required, and ...

CVE-2022-21393

CVE-2022-21393 affects Oracle Database Server Java VM component. Affects 12.1.0.2, 12.2.0.1, 19c, and 21c. A low-privileged attacker with Create Procedure privilege and network access via Oracle Net can compromise the Java VM, enabling a partial denial of service. Root cause per sources is an inp...

CVE-2015-2586

Affected software: Oracle Database Server (Application Express component). Vulnerability summary (from sources): Unspecified vulnerability in the Application Express component allows remote attackers to affect availability via unknown vectors. Affected versions include Oracle Database Server prio...

CVE-2021-1993

CVE-2021-1993 affects Oracle Database Server’s Java VM component. Affected versions: 12.1.0.2, 12.2.0.1, 18c, 19c. An attacker with Create Session via Oracle Net and low privileges, requiring user interaction, can impact data integrity by compromising Java VM. CVSSv3.1 base score 4.8 (I), vector ...

CVE-2006-1884

Technical details for CVE-2006-1884 are not publicly available in the provided documents. No affected product/version, impact, or remediation is described here. Monitor for updates from official advisories and vulnerability databases.

CVE-2009-1963

CVE-2009-1963 affects Oracle Database 11.1.0.6 in the Network Foundation (Oracle Net). The vulnerability is described as an unspecified issue that allows remote authenticated users to impact integrity and availability via unknown vectors. The CVSS v2 base score is 7.5 (HIGH) with network access, ...

CVE-2009-1973

CVE-2009-1973 affects Oracle Database VPD (Virtual Private Database) in 10.1.0.5, 10.2.0.4, and 11.1.0.7. The vulnerability allows remote authenticated users to affect confidentiality and integrity by abusing VPD policies. Oracle’s July 2009 CPU fixes this issue, with patches available for the af...

CVE-2011-0811

CVE-2011-0811 affects Oracle Database Server (10.1.0.5, 10.2.0.3, 10.2.0.4) and Oracle Enterprise Manager Grid Control (10.1.0.6, 10.2.0.5) via the Enterprise Config Management component. The vulnerability allegedly allows local users to affect confidentiality through unknown vectors. Connected s...

CVE-2008-2587

CVE-2008-2587 affects Oracle Database Advanced Replication in 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability allows local access to read trace files (local attack vector) with a low impact (read access, Partial confidentiality). CVSS 2.0 base score is 1.5 (LOW). The ...

CVE-2008-2592

CVE-2008-2592 affects Oracle Database Advanced Replication (SYS.DBMS_DEFER_SYS.DELETE_TRAN) across 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.6. The issue is a SQL injection claim targeting DELETE_TRAN; Oracle CPU July 2008 provides the patch. Exploitation is described as remot...

CVE-2009-1021

CVE-2009-1021 affects Oracle Database Advanced Replication (REPCAT_RPC.VALIDATE_REMOTE_RC) and can be exploited by remote authenticated users to impact confidentiality and integrity. Affected versions include Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability arises fro...

CVE-2009-1966

CVE-2009-1966 affects Oracle Enterprise Manager 10.2.0.4 (and Oracle Database 11.1.0.7) in the Config Management component. The vulnerability is described as an unspecified issue that allows remote, authenticated users to affect confidentiality and integrity via unknown vectors; the Oracle CPU Ju...

CVE-2012-3137

CVE-2012-3137 affects Oracle Database Server (10.2.x, 11.1.x, 11.2.x series). The issue is a flaw in the O5LOGIN authentication protocol that lets remote attackers obtain the session key and salt for arbitrary users, leaking information about the password hash and enabling brute-force password gu...

CVE-2021-35576

CVE-2021-35576 is a vulnerability in Oracle Database Server's Unified Audit component affecting 12.1.0.2, 12.2.0.1 and 19c. It allows a high-privileged attacker with Local Logon and network access via Oracle Net to compromise the Unified Audit data, potentially enabling unauthorized update/insert...

CVE-2002-0843

CVE-2002-0843 affects Apache httpd’s ApacheBench benchmark tool (ab.c). The description specifies buffer overflows in ab.c that occur in Apache before 1.3.27 and in Apache 2.x before 2.0.43. A malicious web server can trigger a long response to cause a denial of service and potentially execute ar...

CVE-2016-0499

CVE-2016-0499 affects Oracle Database Server’s Java VM component in 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors; exploitation details are not provided in the included documents. No...

CVE-2011-2239

CVE-2011-2239 refers to an unspecified vulnerability in Oracle Database Server Core RDBMS component affecting versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.1/11.2.0.2, related to XMLSEQ_IMP_T. The NVD summary states remote authenticated users could impact confidentiality, integrity, and ava...

CVE-2011-2257

CVE-2011-2257 is described as an unspecified vulnerability in the Database Target Type Menus component of Oracle Database Server (versions 10.1.0.5, 10.2.0.x, 11.1.0.x, 11.2.0.x) and Oracle Enterprise Manager Grid Control (10.1.0.6, 10.2.0.5, 11.1.0.1). The reports state that remote attackers can...

CVE-2019-2518

The CVE-2019-2518 entry concerns Oracle Database Server’s Java VM component. Affected are Oracle versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability is described as difficult to exploit and allows a low-privileged attacker with Create Session and Create Procedure privileges, ov...

CVE-2008-2604

CVE-2008-2604 is an Oracle Database 11.1.0.6 vulnerability in the Authentication component over Oracle Net. The Oracle CPU July 2008 Risk Matrix lists CVE-2008-2604 under Authentication (Network) with a base CVSS v2 score of 5.5 (Partial confidentiality/integrity/availability impact) and notes th...

CVE-2011-0881

CVE-2011-0881 affects the EMCTL component of Oracle Database Server (versions 10.2.0.3/10.2.0.4/11.1.0.7) and Oracle Enterprise Manager Grid Control 10.1.0.6. The vulnerability is described as unspecified with remote impact to integrity via unknown vectors. The NVD entry lists a CVSS v2 base scor...

CVE-2011-0870

CVE-2011-0870 affects Oracle Database Server and Oracle Enterprise Manager Grid Control in specific older releases (Database Server 10.1.0.5, 10.2.0.3/4/5, 11.1.0.7, 11.2.0.1/2; EM Grid Control 10.1.0.6 and 10.2.0.5). The vulnerability is described as an unspecified issue in the Schema Management...

CVE-2011-0877

The CVE-2011-0877 entry concerns an unspecified vulnerability in Oracle’s Instance Management component affecting Oracle Database Server versions 10.1.0.5, 10.2.0.3, 10.2.0.4 and Oracle Enterprise Manager Grid Control 10.1.0.6. The issue is described as allowing remote attackers to affect integri...

CVE-2024-21126

CVE-2024-21126 affects Oracle Database Server’s portable clusterware component. The issue stems from insufficient input validation in Oracle Database Portable Clusterware, allowing an unauthenticated attacker with network access via DNS to compromise the component and potentially cause a partial ...

CVE-2011-0792

CVE-2011-0792 affects Oracle Warehouse Builder (OWB) in Oracle Database Server 10.2.0.5 and 11.1.0.7. The vulnerability is a PL/SQL injection in OWBREPOS_OWNER.WB_OLAP_AW_SET_SOLVE_ID, which can let an attacker with OWBREPOS_OWNER rights escalate privileges and potentially access the OS. This is ...

CVE-2018-2841

The CVE-2018-2841 issue affects the Oracle Database Server Java VM component in versions 11.2.0.4, 12.1.0.2 and 12.2.0.1. According to the provided description, a low-privilege attacker with Create Session and Create Procedure privileges and network access via multiple protocols can compromise th...

CVE-2009-1969

CVE-2009-1969 is an Oracle Database vulnerability in the Auditing component affecting 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. The issue allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents confirm affected products/versions and the...

CVE-2011-0831

Oracle CVE-2011-0831 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3/4/5, 11.1.0.7, 11.2.0.1/2 and Oracle Enterprise Manager Grid Control 10.1.0.6/10.2.0.5. Description: Unspecified vulnerability in the Enterprise Config Management component allows remote authenticated users to affect ...

CVE-2015-4796

Technical details for CVE-2015-4796 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, impact, or remediation is specified here. Monitor updates from vendors and security advisories for new information.

CVE-2020-2510

CVE-2020-2510 affects the Oracle Database Server Core RDBMS component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability allows an unauthenticated attacker with network access via OracleNet to compromise the Core RDBMS and potentially take over the system. Exploi...

CVE-2020-2735

CVE-2020-2735 is a vulnerability in the Java VM component of Oracle Database Server. Affected Oracle versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue is difficult to exploit but can be triggered by a low-privileged attacker with Create Session privilege and network access via Or...

CVE-2009-1020

CVE-2009-1020 affects Oracle Database components’ Network Foundation (Oracle Net). The vulnerability is listed under the Oracle July 2009 CPU with a base CVSS v2 score of 9.0 (HIGH). Affected products/versions include Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. The risk ...

CVE-2010-2390

CVE-2010-2390 describes a buffer overflow in the Oracle Enterprise Manager Grid Control EM Console component when processing overly long HTTP requests. The vulnerability affects Oracle Database Server 10.1.0.5/10.2.0.3, Oracle Fusion Middleware 10.1.2.3/10.1.4.3, and Enterprise Manager Grid Contr...

CVE-2010-2415

Oracle Database Change Data Capture (DBMS_CDC_PUBLISH) contains an SQL injection flaw in the CREATE_CHANGE_SET procedure. CVE-2010-2415 affects Oracle Database Server versions 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1. The vulnerability allows an attacker with EXECUTE privilege on SYS.DBMS_CDC_P...

CVE-2011-2253

CVE-2011-2253 relates to an unspecified vulnerability in the Oracle Database Server Core RDBMS component (Oracle DB Server 10.2.0.3–11.2.0.2) that allows remote authenticated users to affect confidentiality, integrity, and availability, with impact linked to SYSDBA. The vulnerability is documente...

CVE-2004-1371

CVE-2004-1371 describes a stack-based buffer overflow in Oracle 9i/10g that allows remote attackers to execute arbitrary code by sending a long token in the text of a wrapped procedure. The vulnerability affects Oracle’s database/server components and can enable remote code execution with the att...

CVE-2010-3590

CVE-2010-3590 affects the Oracle Spatial component in Oracle Database Server versions 10.2.0.4, 11.1.0.7, and 11.2.0.1. The issue, tied to MDSYS, permits remote authenticated users to impact confidentiality and integrity. Connected sources note this CVE is among the Oracle January 2011 CPU fixes;...

CVE-2015-4873

CVE-2015-4873 affects Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2, with vulnerability in the Database Scheduler component that allows local users to impact confidentiality, integrity, and availability via unknown vectors. The cited sources (NVD/SUSE/OpenVAS/Oracle CPU Oct 2015) confir...

CVE-2020-2515

CVE-2020-2515 affects Oracle Database Server’s Database Gateway for ODBC. Affected Oracle versions include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. The vulnerability enables a low-privilege attacker with Create Session permission and OracleNet network access to read, modify, or delete data expo...

CVE-2007-0275

CVE-2007-0275 is a documented cross-site scripting (XSS) vulnerability in the Oracle Reports Web Cartridge (RWCGI60) within the Workflow Cartridge component. The issue allows remote authenticated users to inject arbitrary HTML or web script by supplying a crafted value to the genuser parameter of...

CVE-2014-6467

Technical details about CVE-2014-6467 are not provided in the supplied documents. Public information appears limited to the generic description; monitor for updates.

CVE-2023-21949

CVE-2023-21949 affects Oracle Database Server, specifically the Advanced Networking Option . Affects versions 19.3–19.19 and 21.3–21.10. The vulnerability is exploitable by an unauthenticated attacker with network access via Oracle Net to compromise the Advanced Networking Option, potentially res...

CVE-2007-2108

CVE-2007-2108 affects Oracle Database Core RDBMS on Windows (versions 9.0.1.5, 9.2.0.8, 10.1.0.5, 10.2.0.2). Remote attackers may gain privileges due to NTLM SSPI AcceptSecurityContext granting privileges based on username while all users appear as Guest. No exploit details provided in the source...