CVE-2009-0987

CVE-2009-0987 affects Oracle Database: Upgrade component in versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5 and 10.2.0.3. The vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors, with the vulnerability listed in the July 2009 CPU. The Oracle risk matr...

CVE-2011-0879

CVE-2011-0879 refers to an Oracle vulnerability in the Oracle Enterprise Manager Grid Control/Instance Management component. The TeamSHATTER advisory describes a cross-site scripting (XSS) flaw on the metricDetail$type page that can be exploited remotely, potentially allowing an attacker to steal...

CVE-2015-0457

CVE-2015-0457 concerns an unspecified vulnerability in the Java VM component of Oracle Database Server, affecting 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The description notes remote authenticated access could impact confidentiality, integrity, and availability via unknown vectors, ...

CVE-2019-2749

CVE-2019-2749 affects Oracle Database Server’s Java VM component. Affected releases include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability arises in the Java VM and can allow a low-privilege attacker with Create Session and Create Procedure privileges and network access (via multip...

CVE-2021-2173

CVE-2021-2173 affects Oracle Database Server Recovery component and is documented with affected Oracle versions (12.1.0.2, 12.2.0.1, 18c, 19c). The issue allows a high-privileged attacker with a DBA-level account and network access via Oracle Net to obtain unauthorized read access to Recovery dat...

CVE-2004-1363

CVE-2004-1363 : The provided data confirms a buffer overflow in the extproc component of Oracle 10g. An attacker can trigger remote code execution by manipulating environment variables in the library name, which are expanded after the length check. The vulnerability is described as enabling remot...

CVE-2008-1819

CVE-2008-1819 concerns an unspecified vulnerability in the Oracle Net Services component of Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 (DB09). The connected sources confirm the affected product area as Oracle Database with Net Services, but do not provide concrete details on root cause, expl...

CVE-2008-2591

CVE-2008-2591 affects Oracle Database Vault (Oracle Database 9.2.0.8DV, 10.2.0.3, 11.1.0.6). The issue is listed in Oracle’s July 2008 CPU and tied to the Database Vault component, with remote authenticated attack vectors and partial impact on confidentiality, integrity, and availability. The CPU...

CVE-2008-2613

CVE-2008-2613 affects Oracle Database 10.2.0.4 and 11.1.0.6, via the Database Scheduler: local, unprivileged user can exploit an untrusted library path (libclntsh.so or libnnz10.so) to gain privileges. Affected patches are part of the July 2008 CPU; remediation is to apply the CPU fixes (10.2.0.4...

CVE-2009-1967

CVE-2009-1967 affects Oracle Enterprise Manager (Config Management) on Oracle Database 11.1.0.7 and Oracle Enterprise Manager 10.2.0.4. The vulnerability, described as an unspecified issue, allows a remote attacker with a valid session to affect confidentiality and integrity via an unknown vector...

CVE-2010-2391

CVE-2010-2391 affects Oracle Database Server Core RDBMS components in Oracle Database Server versions 10.1.0.5 and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. The CVSS data from the refer...

CVE-2011-0785

CVE-2011-0785 affects Oracle Help component exposed by Oracle Database Server (versions 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3–10.2.0.5, 10.1.0.5) and Oracle Fusion Middleware (11.1.1.2.0–11.1.1.4.0). Root cause: unspecified vulnerability in the Oracle Help component allowing remote int...

CVE-2014-6577

CVE-2014-6577 is an Oracle Database Server issue affecting the XML Developer's Kit for C component. Versions 11.2.0.3/11.2.0.4/12.1.0.1/12.1.0.2 are affected. The vulnerability is described as an XML external entity (XXE) issue in the XML parser that could allow a remote, authenticated user to af...

CVE-2008-0349

Technical details for CVE-2008-0349 are not publicly provided in the supplied documents; information about affected versions, root cause, impact, and remediation is not disclosed here. Monitor for updates.

CVE-2008-1818

Technical details for CVE-2008-1818 are not publicly provided in the supplied documents. Available records only describe an unspecified authentication vulnerability in Oracle Database 11.1.0.6 with unknown impact. Monitor for updates from official advisories.

CVE-2009-0997

CVE-2009-0997 affects Oracle Database 11.1.0.6 (Database Vault) via an unspecified vulnerability related to DBMS_SYS_SQL that could allow remote authenticated users to affect confidentiality. The issue is addressed in Oracle’s April 2009 Critical Patch Update; apply CPU APR 2009 to mitigate.

CVE-2011-0787

CVE-2011-0787 affects Oracle Database Server 11.1.0.7 and Oracle Enterprise Manager Grid Control, specifically the Application Service Level Management component. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown...

CVE-2011-0816

The CVE-2011-0816 entry describes an unspecified vulnerability in Oracle Database Server’s CMDB Metadata & Instance APIs across multiple versions, with remote authenticated access potentially affecting confidentiality and integrity via unknown vectors. Connected sources confirm involvement of CMD...

CVE-2011-0848

CVE-2011-0848 involves Oracle Database Server (versions 10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.1–11.2.0.2) and Oracle Enterprise Manager Grid Control (10.1.0.6, 10.2.0.5). The vulnerability lies in the Security Framework component and is described as an unspecified issue that allows remote...

CVE-2013-1534

The CVE-2013-1534 issue affects Oracle Database Server (11.2.0.2/11.2.0.3) Workload Manager when used in RAC setups. The root cause is a vulnerability in the Workload Manager component that could let remote attackers affect confidentiality, integrity, and availability via unknown vectors. Documen...

CVE-2014-6545

CVE-2014-6545 affects the Oracle Database Server Java VM component across versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified and accessible to remote authenticated users, impacting confidentiality, integrity, and availability via unknown v...

CVE-2020-2518

CVE-2020-2518 is a vulnerability in the Oracle Database Server Java VM component affecting versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue allows a low-privileged attacker with Create Session privilege and network access via various protocols to take over the Java VM. The initial d...

CVE-2021-2175

The CVE-2021-2175 vulnerability affects Oracle Database Server’s Database Vault component. Affected are Oracle versions 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker with Create Any View or Select Any View privileges and network access via Oracle Net can obtain unauthorized read access to a subse...

CVE-2008-2602

CVE-2008-2602 is an Oracle Database Data Pump vulnerability affecting 10.1.0.5, 10.2.0.4, and 11.1.0.6. The issue involves remote authenticated access via the IMP_FULL_DATABASE role. The impact is not specified in the CVE description. The issue is listed in the July 2008 Critical Patch Update (CP...

CVE-2010-0900

CVE-2010-0900 involves the Network Layer component (Oracle Net) in Oracle Database Server on Windows (versions 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1). The vulnerability allows remote attackers to affect availability via unknown vectors and is listed in the Oracle July 2010 CPU advisory ...

CVE-2010-2389

CVE-2010-2389 affects Oracle Database Server components and Fusion Middleware. The Perl component in Oracle Database Server versions 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5, and in Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0, allows a local user to affect integrity via unknown vector...

CVE-2011-0832

CVE-2011-0832 affects Oracle Database Server (Core RDBMS) versions 11.1.0.7, 11.2.0.1, and 11.2.0.2. The vulnerability is described as unspecified with unknown vectors, allowing remote authenticated users to impact confidentiality, integrity, and availability. No concrete root cause, exploit deta...

CVE-2011-2232

CVE-2011-2232 affects Oracle Database Server XML Developer Kit. The vulnerable products include Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, 11.2.0.1 and Oracle Fusion Middleware 10.1.3.5. The issue is described as an unspecified vulnerability in the XML Developer Kit component ...

CVE-2014-6453

Technical details about CVE-2014-6453 are not publicly available in the provided documents; no specifics on affected product versions, root cause, or exploit info are given. Monitor for updates.

CVE-2008-2600

CVE-2008-2600 is an Oracle Database vulnerability affecting the Oracle Spatial component (MDSYS.SDO_TOPO_MAP) on 10.1.0.5, 10.2.0.3, and 11.1.0.6. The description indicates an unspecified impact with remote authenticated attack vectors. The CVSSv2 base score reported is 6.5 (Medium) with network ...

CVE-2008-2605

CVE-2008-2605 affects Oracle Database 11.1.0.6 (Authentication, Oracle Net). It is a network-based issue requiring authentication, with impact limited to confidentiality (Partial) and no listed impact on integrity/availability in the provided sources. The vulnerability is addressed in the July 20...

CVE-2010-0902

CVE-2010-0902 affects Oracle Database Server’s OLAP component via Oracle Net (Create Session). Affected versions: 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1. The vulnerability is not remote unauthenticated (Requires authentication) but can impact confidentiality, integrity, and av...

CVE-2010-4423

CVE-2010-4423 affects Oracle Database Server on Windows, specifically the Cluster Verify Utility component, with vulnerable installations including 10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.1. The vulnerability is described as unspecified and enables local users to affect confidentiality, integrity, and ...

CVE-2011-2230

CVE-2011-2230 affects Oracle Database Server (Core RDBMS) across multiple major versions (10.1.0.5, 10.2.0.x, 11.1.0.x, 11.2.0.1). The vulnerability is described as unspecified and allows remote attackers to affect availability via unknown vectors. Exploitation status is not detailed in the provi...

CVE-2011-2248

CVE-2011-2248 affects Oracle Database Server components (11.1.0.7, 11.2.x) and Oracle Enterprise Manager Grid Control; the issue is described as an unspecified vulnerability in the SQL Performance Advisories/UIs related area, with potential impact on confidentiality, integrity, and availability (...

CVE-2013-3774

Oracle Database Server contains an unspecified vulnerability in the Network Layer component (CVE-2013-3774) affecting 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1, allowing remote attackers to compromise confidentiality, integrity, and availability via unknown vectors. Public re...

CVE-2007-5897

Buffer overflow in Oracle Database Server (MDSYS.SDO_CS) allows remote authenticated users to crash the server and execute arbitrary code via the TRANSFORM function. Affected: Oracle 8iR3, 9iR1/2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4. Note: this CVE may be related to CVE-2007-5515, CVE-2007-550...

CVE-2010-4420

CVE-2010-4420 affects Oracle Database with Database Vault (versions 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.1). The initial entry describes an unspecified local vulnerability affecting confidentiality and integrity via unknown vectors in the Database Vault component. Connected sources confirm the vul...

CVE-2011-0806

CVE-2011-0806 affects Oracle Database Server on Windows (10gR1/10gR2/11gR1/11gR2, etc.) in the Network Foundation component. Multiple connected sources describe an unspecified vulnerability that can allow remote attackers to affect availability via unknown vectors. The vulnerability is linked to ...

CVE-2011-0876

CVE-2011-0876 is an Oracle Enterprise Manager/Grid Control cross-site scripting vulnerability. TeamSHATTER reports XSS on the EM Grid Control console’s metricDetail$type page, affecting Grid Control 10.1.0.6 and 10.2.0.5, and Oracle Enterprise Manager control included in Oracle Database versions ...

CVE-2010-2419

CVE-2010-2419 targets Oracle Database Server’s Java VM component (versions 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1). A ZDI advisory describes a race condition in Oracle’s Java SecurityManager sandbox that can enable remote code execution when a Java stored procedure is created, requiring authentic...

CVE-2011-0830

CVE-2011-0830 affects Oracle products: Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and Oracle Enterprise Manager Grid Control 10.1.0.6, specifically the Event Management component, with the vulnerability linked to the Rules Management UI. The known issue allows remote attackers to impact...

CVE-2011-0835

Technical details about CVE-2011-0835 are not publicly available in the provided documents. The connected records reference Oracle Core RDBMS vulnerabilities in Oracle Database Server but do not specify affected versions, vectors, or fixes. Monitor for updates.

CVE-2011-0880

Technical details for CVE-2011-0880 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-2547

CVE-2019-2547 affects Oracle Database Server’s Java VM component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. The vulnerability can be exploited by a low-privileged attacker with Create Session and Create Procedure privileges over network protocols; exploitation requires user inte...

CVE-2020-2512

CVE-2020-2512 is a vulnerability in the Database Gateway for ODBC component of Oracle Database Server . Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. An unauthenticated attacker with network access via OracleNet can trigger a hang or frequently repeatable crash (complete DoS) o...

CVE-2009-0972

CVE-2009-0972 is associated with an unspecified vulnerability in the Workspace Manager component of Oracle Database (versions 11.1.0.6/11.1.0.7/10.2.0.3/10.2.0.4/10.1.0.5/9.2.0.8/9.2.0.8DV). The available documents identify the affected product area and that remote authenticated users could affec...

CVE-2009-1972

CVE-2009-1972 affects Oracle Database Auditing: remote authenticated users could affect integrity via DBMS_SYS_SQL/DBMS_SQL in Oracle DB versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. Root cause involves the Auditing component exposure in the Database and its SQL facilities. The v...

CVE-2010-0901

CVE-2010-0901 affects Oracle Database Server Export component (versions 9.2.0.8/9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1). The issue allows remote authenticated users to affect confidentiality via Unknown vectors related to Select Any Dictionary. The Oracle July 2010 CPU document lists C...

CVE-2011-0805

Oracle Database Server UIX component vulnerability CVE-2011-0805 affects 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1. The issue is described as an unspecified remote vulnerability that can impact integrity via unknown vectors. Red Hat and Nessus references confirm the UIX component as affected. Th...