526 matches found
CVE-2015-4888
CVE-2015-4888 affects Oracle Database Server components (Java VM) on versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue is described as an unspecified vulnerability in the Java VM component that allows remote authenticated users to impact confidentiality, integrity, and availability via unknown...
CVE-2017-3240
CVE-2017-3240 is tied to the Oracle Database Server, specifically the RDBMS Security component. The vulnerability affects at least version 12.1.0.2 and, as described in the provided documents, enables a low-privileged, locally authenticated attacker to access (read) a subset of data within RDBMS ...
CVE-2023-22052
CVE-2023-22052 affects Oracle Database Server under the Java VM component. Affected versions are 19.3–19.19 and 21.3–21.10. The issue arises from insufficient input validation in the Java VM, enabling a low-privileged attacker with Create Session and Create Procedure privileges (and network acces...
CVE-2008-2608
CVE-2008-2608 affects Oracle Database 10.1.0.5 and 10.2.0.3 Data Pump, involving SYS.KUPF$FILE_INT. The vulnerability is exploitable via Oracle Net with Execute on SYS.KUPF$FILE_INT and requires authentication; impact is tied to availability (per CVSS data: Network, Low complexity, Single auth, P...
CVE-2014-4296
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2015-0468
CVE-2015-0468 affects Oracle Database Server’s Core RDBMS component (versions 11.1.0.7, 11.2.0.3, 12.1.0.1). The vulnerability allows remote, authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Public references describe an unspecified vulnerability in ...
CVE-2020-2968
CVE-2020-2968 affects Oracle Database Server’s Java VM component. Public docs identify affected versions as 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability allows a low-privileged attacker with Create Session and Create Procedure privileges, with network access via multiple protocol...
CVE-2020-2969
CVE-2020-2969 affects Oracle Database Server’s Data Pump component. Affected versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The issue is exploitable by a high-privilege DBA account with network access via Oracle Net, potentially allowing takeover of Data Pump. CVSSv3.1 base score is 6.6 (C...
CVE-2021-2000
CVE-2021-2000 affects Oracle Database Server’s Unified Audit component. Affected: 12.1.0.2, 12.2.0.1, 18c, 19c. Root cause described as a vulnerability in the Unified Audit data handling that a high-privilege SYS user with network access via Oracle Net could exploit to perform unauthorized update...
CVE-2008-0343
CVE-2008-0343 concerns an unspecified vulnerability in the Oracle Spatial component affecting Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5. The description notes unknown impact and remote attack vectors (DB06). Public references list multiple advisories; the NVD entry assigns a...
CVE-2015-0483
CVE-2015-0483 affects Oracle Database Server Core RDBMS components (versions 11.1.0.7, 11.2.0.3/11.2.0.4, 12.1.0.1/12.1.0.2). The description states a remote authenticated impact to integrity via unknown vectors; no concrete exploit details, affected products beyond Oracle Database Server, or rem...
CVE-2015-4923
CVE-2015-4923 is an unspecified vulnerability in the XML Developer�B4s Kit for C component of Oracle Database Server, affecting versions 11.2.0.4, 12.1.0.1 and 12.1.0.2. Connected sources attribute the issue to a vulnerability that could allow remote authenticated users to affect availability via...
CVE-2017-10282
CVE-2017-10282 affects Oracle Database Server’s Core RDBMS component. Affected versions are 12.1.0.2 and 12.2.0.1. An attacker with Create Session and Execute Catalog Role privileges and network access via Oracle Net can compromise the Core RDBMS, with potential takeover and impacts to confidenti...
CVE-2022-21606
CVE-2022-21606 affects Oracle Database Server 19c, specifically the Oracle Services for Microsoft Transaction Server component on Windows. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Transaction Server component; exploitation requires human ...
CVE-2001-0833
Oracle 8.0.x–9.0.1 contains a buffer overflow in otrcrep that allows local users to execute arbitrary code via a long ORACLE_HOME environment variable. Root cause is a buffer overflow in otrcrep; impact is local code execution with complete confidentiality, integrity, and availability implication...
CVE-2006-3704
CVE-2006-3704 is an unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 with unknown impact and attack vectors. Connected data confirms affected component and version (Oracle ODBC Driver, Oracle DB 10.1.0.4). The Nessus entry (July 2006 CPU) lists this CVE among multi...
CVE-2010-2407
CVE-2010-2407 affects Oracle Database Server (XDK component) in 10.1.0.5, 10.2.0.4 and 11.1.0.7. The vulnerability allows remote attackers to affect integrity via unknown vectors over the network (CVSS v2 base 4.3, MEDIUM). Oracle’s October 2010 CPU includes fixes for this and related issues; rem...
CVE-2016-0472
CVE-2016-0472 affects Oracle Database Server’s XDB - XML Database component. It targets versions 11.2.0.4, 12.1.0.1, and 12.1.0.2, where an unspecified vulnerability allows remote authenticated users to impact confidentiality and availability via unknown vectors. The provided docs do not specify ...
CVE-2019-2753
CVE-2019-2753 affects Oracle Text in Oracle Database Server for 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. The vulnerability allows a low-privileged user with Create Session and network access via OracleNet to read a subset of Oracle Text data and potentially cause partial denial of service. Exploitat...
CVE-2019-2799
CVE-2019-2799 describes a heap-based buffer overflow in the Oracle Database Server’s ODBC Driver on Windows. The ZDI advisory (ZDI-19-662) notes remote code execution via parsing certain attributes in the ODBC driver; exploitation requires user interaction (visiting a malicious page or opening a ...
CVE-2019-2909
CVE-2019-2909 affects Oracle Database Server in the Java VM component. Affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. It can be exploited with network access via multiple protocols by an unauthenticated attacker to compromise Java VM, potentially leading to unauthorized creation, deletio...
CVE-2020-2737
CVE-2020-2737 affects Oracle Database Server, Core RDBMS component. Affected versions include 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability can be exploited by a high-privilege user with Create Session and Execute Catalog Role privileges, with network access via Oracle Net, and re...
CVE-2014-4289
Oracle Database Server (versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1) JDBC component vulnerability (CVE-2014-4289) allows remote authenticated users to affect confidentiality and integrity via unknown vectors, per NVD entry. Connected sources corroborate the JDBC-focused issue and reference re...
CVE-2014-4299
Technical details about CVE-2014-4299 are not publicly provided in the supplied documents; no specifics on affected product versions, root cause, or remediation are available here. Monitor for updates.
CVE-2018-2939
CVE-2018-2939 affects Oracle Database Server, Core RDBMS component. Affected versions: 11.2.0.4, 12.1.0.2, 12.2.0.1, 18.1, 18.2. An attacker with Local Logon and low privileges can compromise Core RDBMS, potentially leading to unauthorized data creation/deletion/modification and the possibility o...
CVE-2019-2954
Oracle CVE-2019-2954 affects the Core RDBMS component of Oracle Database Server. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. The vulnerability can be exploited by a low-privilege user with Create Session and Create Procedure privileges who can log on to the infrastructure whe...
CVE-2020-2731
CVE-2020-2731 affects Oracle Database Server, specifically the Core RDBMS component. Affects versions 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability allows a low-privileged attacker with Local Logon and user interaction to potentially perform unauthorized updates/inserts/deletes on Core RDBM...
CVE-2024-21233
Oracle Database Server Core vulnerability CVE-2024-21233 affects Core in Oracle Database Server versions 19.3–19.24, 21.3–21.15, and 23.4–23.5. The flaw stems from improper authorization in the Database Core Component, enabling a low-privileged attacker with Create Session privilege and network a...
CVE-2005-0701
Oracle Database Server 8i/9i is affected by a directory traversal vulnerability in the UTL_FILE package (FOPEN, FRENAME) that allows remote attackers to read or rename arbitrary files via crafted ... sequences. The issue stems from insufficient input validation on file-path arguments to UTL_FILE...
CVE-2019-2955
CVE-2019-2955 affects Oracle Database Server — Core RDBMS component. Vulnerable are Oracle DB versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, and 19c. The flaw allows a low-privilege attacker with Local Logon and user interaction to update, insert, or delete Core RDBMS data and potentially cause a pa...
CVE-2024-20995
The CVE refers to Oracle Database Sharding in Oracle Database Server. Affected: Oracle Database Server 19.3–19.22 and 21.3–21.13. Root cause: insufficient input validation in the Oracle Database Sharding component. Impact: high-privileged DBA with network access via Oracle Net can cause partial d...
CVE-2006-0256
CVE-2006-0256 affects Oracle Database Server in multiple versions (e.g., 8.1.7.x, 9.2.x, 10g) with an unspecified impact in the CVE record. Connected sources describe a login-time SQL injection vulnerability in the Oracle DBMS login/authentication flow (AUTH_ALTER_SESSION) that could enable remot...
CVE-2008-6065
Oracle Database Server 10.1/10.2/11g vulnerability: GRANTs for CREATE ANY DIRECTORY plus CREATE OR REPLACE DIRECTORY aliasing allow remote authenticated users to abuse aliased pathnames to overwrite the password file via UTL_FILE, potentially elevating to SYSDBA. Root cause is directory permissio...
CVE-2010-0071
CVE-2010-0071 covers a remote memory-corruption vulnerability in Oracle Database’s TNS Listener that affects 9.2.0.8/9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7. Exploitation is possible via the Oracle Net protocol, potentially impacting confidentiality, integrity, and availability. The vulnerabi...
CVE-2010-0866
CVE-2010-0866 concerns Oracle Database JavaVM; connected docs cite exploits for DBMS_JVM_EXP_PERMS enabling OS command/code execution via remote authenticated users (CREATE_SESSION) on Oracle DB 10gR2/11gR1/R2. The flaw allows granting Java IO privileges, per Metasploit modules referenced in PACK...
CVE-2012-3220
CVE-2012-3220 is a published vulnerability in Oracle Spatial/GeoRaster within Oracle Database Server (versions 10.2.0.3–11.2.0.3) that exploits a stack-based overflow in the GeoRaster API. The issue allows a remote attacker who can connect to spatially enabled Oracle databases to execute arbitrar...
CVE-2014-6578
CVE-2014-6578 affects Oracle Database Server Workspace Manager component in Oracle Database versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via vectors related to SDO_TOPO and WMSYS.LT....
CVE-2015-4857
CVE-2015-4857 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 (RDBMS component). The vulnerability is described as unspecified with remote authenticated access that could impact confidentiality and integrity via unknown vectors. Documented exposure is supported by multiple sources (NVD entry...
CVE-2016-5555
CVE-2016-5555 affects Oracle Database Server 11.2.0.4 and 12.1.0.2, via the OJVM component. The vulnerability allows remote administrators to impact confidentiality, integrity, and availability from unknown vectors. NVD CVSSv3 base score is 9.1 (CRITICAL); CVSSv2 is 6.5 (MEDIUM) with partial impa...
CVE-2003-0727
CVE-2003-0727 refers to multiple buffer overflows in the Oracle 9i Database Release 2 XML DB (XDB) functionality. Public references describe stack/buffer overflow conditions in Oracle 9i XDB services (HTTP and FTP) that can be triggered by long inputs to XDB commands, enabling local users to caus...
CVE-2006-0271
CVE-2006-0271 affectsOracle Database server versions 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 in the Upgrade & Downgrade component. The description notes an Oracle claim that the issue is SQL injection in the DBMS_REGISTRY package for parameters to IS_COMPONENT, GET_COMP_OPTION, DISABLE_DDL_TRIGGE...
CVE-2006-0552
Technical details about CVE-2006-0552 (affected Oracle Net Listener, impact, exploitability, and fix) are not publicly provided in the supplied documents; monitor for official advisories for concrete information.
CVE-2014-0378
CVE-2014-0378 affects Oracle Database Server’s Spatial component across 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability is described as unspecified, enabling local users to impact confidentiality, integrity, and availability via unknown vectors. CVSS v2 base score is 4.1 (MEDIUM), w...
CVE-2017-10120
CVE-2017-10120 affects Oracle Database Server 12.1.0.2 in the RDBMS Security component. The vulnerability allows a local attacker with Create Session and Select Any Dictionary privileges to compromise RDBMS Security, potentially enabling unauthorized update/insert/delete of some data (I: LOW; A/N...
CVE-2018-3004
CVE-2018-3004 concerns the Oracle Database Server’s Java VM component. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18.2. A low-privilege attacker with Create Session and Create Procedure privileges and network access via multiple protocols can potentially compromise the Java VM, leadin...
CVE-2012-0510
CVE-2012-0510 affects Oracle Database Server 10.2.0.3/10.2.0.4/10.2.0.5 and 11.1.0.7, where the Core RDBMS component contains an unspecified vulnerability that allows remote attackers to impact integrity and availability via unknown vectors. Multiple connected sources reiterate the issue as an un...
CVE-2013-3760
CVE-2013-3760 affects Oracle Database Server installations with Oracle executable component on versions 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3. The vulnerability is described as unspecified and is exploitable by local users, impacting confidentiality, integrity, and availability via...
CVE-2014-4236
CVE-2014-4236 affects Oracle Database Server 11.2.0.4 and 12.1.0.1, with an unspecified vulnerability in the RDBMS Core component. The impact is partial confidentiality, partial integrity, and partial availability. Exploitation requires remote authenticated access, and the vectors are not detaile...