CVE-2007-2108

CVE-2007-2108 affects Oracle Database Core RDBMS on Windows (versions 9.0.1.5, 9.2.0.8, 10.1.0.5, 10.2.0.2). Remote attackers may gain privileges due to NTLM SSPI AcceptSecurityContext granting privileges based on username while all users appear as Guest. No exploit details provided in the source...

CVE-2008-2591

CVE-2008-2591 affects Oracle Database Vault (Oracle Database 9.2.0.8DV, 10.2.0.3, 11.1.0.6). The issue is listed in Oracle’s July 2008 CPU and tied to the Database Vault component, with remote authenticated attack vectors and partial impact on confidentiality, integrity, and availability. The CPU...

CVE-2008-2602

CVE-2008-2602 is an Oracle Database Data Pump vulnerability affecting 10.1.0.5, 10.2.0.4, and 11.1.0.6. The issue involves remote authenticated access via the IMP_FULL_DATABASE role. The impact is not specified in the CVE description. The issue is listed in the July 2008 Critical Patch Update (CP...

CVE-2011-0816

The CVE-2011-0816 entry describes an unspecified vulnerability in Oracle Database Server’s CMDB Metadata & Instance APIs across multiple versions, with remote authenticated access potentially affecting confidentiality and integrity via unknown vectors. Connected sources confirm involvement of CMD...

CVE-2011-0879

CVE-2011-0879 refers to an Oracle vulnerability in the Oracle Enterprise Manager Grid Control/Instance Management component. The TeamSHATTER advisory describes a cross-site scripting (XSS) flaw on the metricDetail$type page that can be exploited remotely, potentially allowing an attacker to steal...

CVE-2026-71064

A critical (CVSS 9.6) unauthenticated vulnerability in Oracle Database Server's Portable Clusterware component affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An attacker on the adjacent network segment can take over Portable Clusterware with scope change impacting other products. No...

CVE-2008-2613

CVE-2008-2613 affects Oracle Database 10.2.0.4 and 11.1.0.6, via the Database Scheduler: local, unprivileged user can exploit an untrusted library path (libclntsh.so or libnnz10.so) to gain privileges. Affected patches are part of the July 2008 CPU; remediation is to apply the CPU fixes (10.2.0.4...

CVE-2009-0987

CVE-2009-0987 affects Oracle Database: Upgrade component in versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5 and 10.2.0.3. The vulnerability allows remote authenticated users to affect confidentiality and integrity via unknown vectors, with the vulnerability listed in the July 2009 CPU. The Oracle risk matr...

CVE-2010-2389

CVE-2010-2389 affects Oracle Database Server components and Fusion Middleware. The Perl component in Oracle Database Server versions 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5, and in Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0, allows a local user to affect integrity via unknown vector...

CVE-2011-0785

CVE-2011-0785 affects Oracle Help component exposed by Oracle Database Server (versions 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3–10.2.0.5, 10.1.0.5) and Oracle Fusion Middleware (11.1.1.2.0–11.1.1.4.0). Root cause: unspecified vulnerability in the Oracle Help component allowing remote int...

CVE-2011-0831

Oracle CVE-2011-0831 affects Oracle Database Server versions 10.1.0.5, 10.2.0.3/4/5, 11.1.0.7, 11.2.0.1/2 and Oracle Enterprise Manager Grid Control 10.1.0.6/10.2.0.5. Description: Unspecified vulnerability in the Enterprise Config Management component allows remote authenticated users to affect ...

CVE-2018-2841

The CVE-2018-2841 issue affects the Oracle Database Server Java VM component in versions 11.2.0.4, 12.1.0.2 and 12.2.0.1. According to the provided description, a low-privilege attacker with Create Session and Create Procedure privileges and network access via multiple protocols can compromise th...

CVE-2019-2749

CVE-2019-2749 affects Oracle Database Server’s Java VM component. Affected releases include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability arises in the Java VM and can allow a low-privilege attacker with Create Session and Create Procedure privileges and network access (via multip...

CVE-2007-0275

CVE-2007-0275 is a documented cross-site scripting (XSS) vulnerability in the Oracle Reports Web Cartridge (RWCGI60) within the Workflow Cartridge component. The issue allows remote authenticated users to inject arbitrary HTML or web script by supplying a crafted value to the genuser parameter of...

CVE-2009-1967

CVE-2009-1967 affects Oracle Enterprise Manager (Config Management) on Oracle Database 11.1.0.7 and Oracle Enterprise Manager 10.2.0.4. The vulnerability, described as an unspecified issue, allows a remote attacker with a valid session to affect confidentiality and integrity via an unknown vector...

CVE-2010-0902

CVE-2010-0902 affects Oracle Database Server’s OLAP component via Oracle Net (Create Session). Affected versions: 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1. The vulnerability is not remote unauthenticated (Requires authentication) but can impact confidentiality, integrity, and av...

CVE-2011-0832

CVE-2011-0832 affects Oracle Database Server (Core RDBMS) versions 11.1.0.7, 11.2.0.1, and 11.2.0.2. The vulnerability is described as unspecified with unknown vectors, allowing remote authenticated users to impact confidentiality, integrity, and availability. No concrete root cause, exploit deta...

CVE-2011-2253

CVE-2011-2253 relates to an unspecified vulnerability in the Oracle Database Server Core RDBMS component (Oracle DB Server 10.2.0.3–11.2.0.2) that allows remote authenticated users to affect confidentiality, integrity, and availability, with impact linked to SYSDBA. The vulnerability is documente...

CVE-2020-2515

CVE-2020-2515 affects Oracle Database Server’s Database Gateway for ODBC. Affected Oracle versions include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. The vulnerability enables a low-privilege attacker with Create Session permission and OracleNet network access to read, modify, or delete data expo...

CVE-2008-1819

CVE-2008-1819 concerns an unspecified vulnerability in the Oracle Net Services component of Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 (DB09). The connected sources confirm the affected product area as Oracle Database with Net Services, but do not provide concrete details on root cause, expl...

CVE-2010-2391

CVE-2010-2391 affects Oracle Database Server Core RDBMS components in Oracle Database Server versions 10.1.0.5 and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. The CVSS data from the refer...

CVE-2011-0787

CVE-2011-0787 affects Oracle Database Server 11.1.0.7 and Oracle Enterprise Manager Grid Control, specifically the Application Service Level Management component. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown...

CVE-2013-1534

The CVE-2013-1534 issue affects Oracle Database Server (11.2.0.2/11.2.0.3) Workload Manager when used in RAC setups. The root cause is a vulnerability in the Workload Manager component that could let remote attackers affect confidentiality, integrity, and availability via unknown vectors. Documen...

CVE-2013-3774

Oracle Database Server contains an unspecified vulnerability in the Network Layer component (CVE-2013-3774) affecting 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1, allowing remote attackers to compromise confidentiality, integrity, and availability via unknown vectors. Public re...

CVE-2021-2175

The CVE-2021-2175 vulnerability affects Oracle Database Server’s Database Vault component. Affected are Oracle versions 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker with Create Any View or Select Any View privileges and network access via Oracle Net can obtain unauthorized read access to a subse...

CVE-2008-0349

Technical details for CVE-2008-0349 are not publicly provided in the supplied documents; information about affected versions, root cause, impact, and remediation is not disclosed here. Monitor for updates.

CVE-2008-1818

Technical details for CVE-2008-1818 are not publicly provided in the supplied documents. Available records only describe an unspecified authentication vulnerability in Oracle Database 11.1.0.6 with unknown impact. Monitor for updates from official advisories.

CVE-2009-1972

CVE-2009-1972 affects Oracle Database Auditing: remote authenticated users could affect integrity via DBMS_SYS_SQL/DBMS_SQL in Oracle DB versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. Root cause involves the Auditing component exposure in the Database and its SQL facilities. The v...

CVE-2010-4423

CVE-2010-4423 affects Oracle Database Server on Windows, specifically the Cluster Verify Utility component, with vulnerable installations including 10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.1. The vulnerability is described as unspecified and enables local users to affect confidentiality, integrity, and ...

CVE-2011-0806

CVE-2011-0806 affects Oracle Database Server on Windows (10gR1/10gR2/11gR1/11gR2, etc.) in the Network Foundation component. Multiple connected sources describe an unspecified vulnerability that can allow remote attackers to affect availability via unknown vectors. The vulnerability is linked to ...

CVE-2011-0848

CVE-2011-0848 involves Oracle Database Server (versions 10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, 11.2.0.1–11.2.0.2) and Oracle Enterprise Manager Grid Control (10.1.0.6, 10.2.0.5). The vulnerability lies in the Security Framework component and is described as an unspecified issue that allows remote...

CVE-2011-0880

Technical details for CVE-2011-0880 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-6467

Technical details about CVE-2014-6467 are not provided in the supplied documents. Public information appears limited to the generic description; monitor for updates.

CVE-2015-0457

CVE-2015-0457 concerns an unspecified vulnerability in the Java VM component of Oracle Database Server, affecting 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The description notes remote authenticated access could impact confidentiality, integrity, and availability via unknown vectors, ...

CVE-2020-2518

CVE-2020-2518 is a vulnerability in the Oracle Database Server Java VM component affecting versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue allows a low-privileged attacker with Create Session privilege and network access via various protocols to take over the Java VM. The initial d...

CVE-2006-2081

CVE-2006-2081 affects Oracle Database Server 10g Release 2, where local users can trigger arbitrary SQL via the GET_DOMAIN_INDEX_METADATA function in DBMS_EXPORT_EXTENSION. The primary issue is insecure privileges that allow SQL to be introduced outside of a character-based injection, not a tradi...

CVE-2011-0830

CVE-2011-0830 affects Oracle products: Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, and Oracle Enterprise Manager Grid Control 10.1.0.6, specifically the Event Management component, with the vulnerability linked to the Rules Management UI. The known issue allows remote attackers to impact...

CVE-2020-2512

CVE-2020-2512 is a vulnerability in the Database Gateway for ODBC component of Oracle Database Server . Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. An unauthenticated attacker with network access via OracleNet can trigger a hang or frequently repeatable crash (complete DoS) o...

CVE-2024-21174

CVE-2024-21174 affects Oracle Database Server's Java VM component across 19.3–19.23, 21.3–21.14, and 23.4. The root cause is improper resource clearance/release in the Java VM, allowing a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net...

CVE-2011-0876

CVE-2011-0876 is an Oracle Enterprise Manager/Grid Control cross-site scripting vulnerability. TeamSHATTER reports XSS on the EM Grid Control console’s metricDetail$type page, affecting Grid Control 10.1.0.6 and 10.2.0.5, and Oracle Enterprise Manager control included in Oracle Database versions ...

CVE-2008-2600

CVE-2008-2600 is an Oracle Database vulnerability affecting the Oracle Spatial component (MDSYS.SDO_TOPO_MAP) on 10.1.0.5, 10.2.0.3, and 11.1.0.6. The description indicates an unspecified impact with remote authenticated attack vectors. The CVSSv2 base score reported is 6.5 (Medium) with network ...

CVE-2008-2605

CVE-2008-2605 affects Oracle Database 11.1.0.6 (Authentication, Oracle Net). It is a network-based issue requiring authentication, with impact limited to confidentiality (Partial) and no listed impact on integrity/availability in the provided sources. The vulnerability is addressed in the July 20...

CVE-2010-0900

CVE-2010-0900 involves the Network Layer component (Oracle Net) in Oracle Database Server on Windows (versions 9.2.0.8, 10.1.0.5, 10.2.0.4, 11.1.0.7, 11.2.0.1). The vulnerability allows remote attackers to affect availability via unknown vectors and is listed in the Oracle July 2010 CPU advisory ...

CVE-2011-2230

CVE-2011-2230 affects Oracle Database Server (Core RDBMS) across multiple major versions (10.1.0.5, 10.2.0.x, 11.1.0.x, 11.2.0.1). The vulnerability is described as unspecified and allows remote attackers to affect availability via unknown vectors. Exploitation status is not detailed in the provi...

CVE-2011-2232

CVE-2011-2232 affects Oracle Database Server XML Developer Kit. The vulnerable products include Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, 11.2.0.1 and Oracle Fusion Middleware 10.1.3.5. The issue is described as an unspecified vulnerability in the XML Developer Kit component ...

CVE-2011-2248

CVE-2011-2248 affects Oracle Database Server components (11.1.0.7, 11.2.x) and Oracle Enterprise Manager Grid Control; the issue is described as an unspecified vulnerability in the SQL Performance Advisories/UIs related area, with potential impact on confidentiality, integrity, and availability (...

CVE-2014-6453

Technical details about CVE-2014-6453 are not publicly available in the provided documents; no specifics on affected product versions, root cause, or exploit info are given. Monitor for updates.

CVE-2019-2582

CVE-2019-2582 affects Oracle Database Server Core RDBMS. The Red Hat and NVD records describe an unauthenticated, network-accessible vulnerability via Oracle Net that can lead to read access to a subset of Core RDBMS data in affected versions 12.2.0.1 and 18c. The underlying cause and impact are ...

CVE-2021-2234

CVE-2021-2234 affects Oracle Database Server (Java VM component). Affected: 12.1.0.2, 12.2.0.1, 18c, 19c. Vulnerability allows a low-privilege user with Create Session and network access via Oracle Net to compromise the Java VM, with potential for unauthorized creation/deletion/modification of da...

CVE-2009-0997

CVE-2009-0997 affects Oracle Database 11.1.0.6 (Database Vault) via an unspecified vulnerability related to DBMS_SYS_SQL that could allow remote authenticated users to affect confidentiality. The issue is addressed in Oracle’s April 2009 Critical Patch Update; apply CPU APR 2009 to mitigate.