CVE-2014-4290

Technical details for CVE-2014-4290 are not publicly available in the provided documents. Monitor for updates from Oracle or security advisories.

CVE-2014-4310

Technical details about CVE-2014-4310 are not publicly available in the provided documents. Connected EUVD entries reference malware but do not specify affected products/versions/root cause. Monitor for updates.

CVE-2014-6483

CVE-2014-6483 affects the Oracle Database Server, specifically the Application Express component, prior to version 4.2.6. The vulnerability allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. No exploitation details or fixed version are pr...

CVE-2015-4753

CVE-2015-4753 affects Oracle Database Server, specifically the RDBMS Support Tools component. The linked SUSE advisory (SUSE-SU-2015:1353-1) describes a vulnerability in Oracle Update/Support Tools where a local attacker could read data and thus compromise confidentiality. This CVE is also listed...

CVE-2019-2734

CVE-2019-2734 affects Oracle Database Server Core RDBMS in 12.2.0.1, 18c and 19c. A low-privileged user with Create Session and DBMS_ADVISOR Execute privileges, over OracleNet, can compromise Core RDBMS data resulting in possible unauthorized updates/inserts/deletes (I by CVSSv3 4.3). Public docu...

CVE-2005-1197

CVE-2005-1197 is a SQL injection vulnerability in Oracle Database Server 10g affecting the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure via the CHANGE_SET_NAME parameter. Remote attackers could potentially execute arbitrary SQL commands; impact and remediation details are not specified i...

CVE-2007-2130

CVE-2007-2130 describes an unspecified vulnerability in Oracle’s Workflow Cartridge affecting Oracle Database Server (9.2.0.1, 10.1.0.2, 10.2.0.1), Application Server (9.0.4.3, 10.1.2.0.2), Collaboration Suite (10.1.2), and E-Business Suite. The description indicates unknown impact and remote aut...

CVE-2008-0340

CVE-2008-0340 concerns Oracle Database with multiple unspecified vulnerabilities affecting the Advanced Queuing (DB02) and Oracle Spatial (DB04) components across several versions (e.g., 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3). The description notes unknown impact and remote attack...

CVE-2009-3414

CVE-2009-3414 concerns Oracle Spatial in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability is described as unspecified and allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Affected component is Oracle Spatial within the dat...

CVE-2014-6547

Technical details are not publicly available in the provided documents. No confirmed affected products, impact, or remediation are stated. Monitor for updates.

CVE-2015-2629

CVE-2015-2629 affects Oracle Database Server’s Java VM component. The SUSE security update notes that the vulnerability allows authenticated network attackers to compromise confidentiality, integrity, and availability via multiple protocols, potentially leading to arbitrary code execution and ope...

CVE-2016-0461

CVE-2016-0461 affects Oracle Database Server XDB (XML Database) components. Affected are Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified, allowing remote authenticated users to affect availability via unknown vectors. No exploit details are p...

CVE-2016-0467

The connected IBM OpenPages bulletin ties CVE-2016-0467 to an Oracle Database Server Security component vulnerability. It states this unspecified security issue has no confidentiality impact, partial integrity impact, and no availability impact (CVSS Base Score 4, vector AV:N/AC:L/Au:S/C:N/I:P/A:...

CVE-2016-3562

Oracle Database Server (RDBMS Security and SQL*Plus components) is affected by CVE-2016-3562 in versions 11.2.0.4 and 12.1.0.2. The vulnerability is described as unspecified and allows remote administrators to affect confidentiality via vectors related to DBA. The NVD entry lists CVSSv3 impact as...

CVE-2006-0282

Technical details for CVE-2006-0282 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the OpenVAS/Nessus entries reference the CVE but do not list affected versions, vectors, or fixes.

CVE-2007-0270

CVE-2007-0270 affects Oracle Database 9.2.0.7 and 10.1.0.4 via a buffer overflow in SYS.DBMS_DRS.GET_PROPERTY (DB03). The vulnerability allows a remote, authenticated user with EXECUTE on SYS.DBMS_DRS to crash the server or execute arbitrary code. Affected component is the DBMS_DRS package; root ...

CVE-2008-0344

Technical details about CVE-2008-0344 are not publicly available in the provided documents. The records note an unspecified vulnerability in the Oracle Spatial component with unknown impact; monitor for updates.

CVE-2012-0525

CVE-2012-0525 affects Oracle Enterprise Manager Base Platform in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3 and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1. Connected documentation confirms a SQL Injection vulnerability in the Enterprise Manager web app (searchPage: /em/...

CVE-2012-0526

Technical details for CVE-2012-0526 are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2014-4295

Technical details for CVE-2014-4295 are not publicly available in the provided documents. The available records mention an unspecified vulnerability in Oracle Database Server Java VM across several versions. Monitor for updates from official advisories.

CVE-2014-6454

Oracle Database Server contains an unspecified vulnerability in the SQLJ component affecting multiple versions (11.1.0.7, 11.2.0.3/4, 12.1.0.1/2). The issue allows remote authenticated users to impact confidentiality via unknown vectors. No concrete exploit or vector details are provided in the s...

CVE-2014-6477

Technical details about CVE-2014-6477 (affected Oracle JPublisher component and specific versions, impact, vectors, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2015-0479

CVE-2015-0479 is mapped to Oracle Database Server and is referenced in multiple sources as an unspecified vulnerability affecting the XDK/XDB XML Database component. The connected documents indicate affected software: Oracle Database Server versions 11.2.0.3, 11.2.0.4, and 12.1.0.1, with impact d...

CVE-2015-4921

CVE-2015-4921 affects Oracle Database Server’s Database Vault component on versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. It enables remote authenticated users to impact data integrity via unknown vectors (root cause not disclosed). Several connected sources reference this CVE as part of Oracle’s Jan...

CVE-2019-2776

CVE-2019-2776 affects Oracle Database Server Core RDBMS. Affected: 12.1.0.2, 12.2.0.1, 18c, 19c. The vulnerability enables a high-privilege attacker with Create Any Index privilege and network access via OracleNet to compromise Core RDBMS, potentially granting unauthorized access to data and unau...

CVE-2024-21123

The CVE-2024-21123 issue affects Oracle Database Server (Oracle Database Core). Affected versions are 19.3 through 19.23. The root cause is insufficient input validation in the Oracle Database Core component, enabling a high-privileged attacker with SYSDBA privileges to compromise the Core when l...

CVE-2014-4237

CVE-2014-4237 affects Oracle Database Server 11.2.0.4 and 12.1.0.1, specifically the RDBMS Core component. The vulnerability is described as unspecified with remote authenticated users able to affect confidentiality via unknown vectors. The connected sources provide no concrete exploit details or...

CVE-2014-4291

Technical details for CVE-2014-4291 are not provided in the connected documents. The EUVD entries reference malware unrelated to this CVE. Monitor for updates from official advisories.

CVE-2014-4294

CVE-2014-4294 involves an unspecified vulnerability in the Java VM component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The description notes remote authenticated users could affect confidentiality via unknown vectors, and it explicitly states this is...

CVE-2014-6514

CVE-2014-6514 affects Oracle Database Server’s PL/SQL component across multiple versions (11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1). The vulnerability allows remote authenticated users to affect confidentiality via unknown vectors. Base CVSS v2 score is 4.0 (AV:N/AC:L/Au:S/C:P/I:N/A:N). No exploita...

CVE-2015-2595

CVE-2015-2595 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 where the Oracle OLAP component contains an unspecified vulnerability that can be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The connected OpenVAS entry and ...

CVE-2019-2484

CVE-2019-2484 affects Oracle Database Server’s Application Express component, specifically versions 5.1 and 18.2. The flaw allows a low-privileged attacker with a valid account and network access via HTTP to compromise Application Express, with human interaction required. Successful exploitation ...

CVE-2006-0259

Concise summary: CVE-2006-0259 relates to multiple unspecified vulnerabilities in Oracle Database Server 10.1.0.5, affecting the Data Pump component (DB04/DB06), Net Listener (DB10), and Oracle Text (DB16). The DB06 issue is alleged to be a SQL injection in specific GENERATE_JOB_NAME/GET_* and re...

CVE-2006-0260

CVE-2006-0260 affects Oracle Database Server 9.2.0.7 and 10.1.0.5. The issue is described as a SQL injection vulnerability in SYS.DBMS_METADATA_UTIL (and related DBMS_METADATA packages) caused by insufficient input validation in multiple functions (e.g., LONG2VARCHAR/DBMS_METADATA_UTIL; MAKE_FILT...

CVE-2009-1018

CVE-2009-1018 affects Oracle Database 10.2.0.4 Workspace Manager (WMSYS.LTRIC). The vulnerability is listed in Oracle’s October 2009 CPU and is mapped to CVE-2009-1018 in the Oracle Database Risk Matrix, with a base CVSS v2 score of 5.5 (Network, Low complexity, Single authentication, partial con...

CVE-2009-1996

CVE-2009-1996 affects Oracle Database Logical Standby (Oracle Net) and is listed among Oracle’s January 2010 CPU fixes. The vulnerability allows a remote attacker (no authentication required for the exploit in some vectors) to impact integrity via unknown vectors; the CVSSv2 base score in NVD is ...

CVE-2013-3771

CVE-2013-3771 affects Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3. It is an unspecified local vulnerability in the Oracle executable component that could impact confidentiality, integrity, and availability via unknown vectors. The connected docs do not provide conc...

CVE-2014-4293

Technical details for CVE-2014-4293 are not publicly provided in the supplied documents. Monitor for updates from Oracle advisories and vulnerability databases.

CVE-2015-2655

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2015-2655: a cross-site scripting vulnerability affecting all versions prior to 4.2.3.00.08. It can impact confidentiality and integrity via remote access authenticated users. The fixed version is 4.2.3.00.08. Mitigati...

CVE-2015-4755

CVE-2015-4755 is a disclosed vulnerability in the Oracle Database Server RDBMS Security component (Oracle Database Server 12.1.0.2). OpenVAS lists this CVE as part of the July 2015 CPU suite and notes affected products include Oracle Database Server and specific versions such as 12.1.0.2. The vul...

CVE-2020-2527

CVE-2020-2527 — Oracle Database Core RDBMS affects Oracle Database Server core RDBMS on 12.1.0.2, 12.2.0.1, 18c, 19c. Exploitation requires a high-privilege user (Create Index/Create Table) with OracleNet network access and can lead to unauthorized read access of a subset of Core RDBMS data. CVSS...

CVE-2020-2734

CVE-2020-2734 affects Oracle Database Server, specifically the RDBMS/Optimizer component. Affected versions are 12.1.0.2, 12.2.0.1, 18c, and 19c. The vulnerability can be exploited by a highly privileged attacker who has Execute on the DBMS_SQLTUNE privilege and network access via Oracle Net. Exp...

CVE-2006-5332

CVE-2006-5332 concerns Oracle Database components: an unspecified vulnerability in xdb.dbms_xdbz within XMLDB affecting Oracle Database 9.2.0.6 and 10.1.0.4. The DB01 issue is reported as PL/SQL injection in the ENABLE_HIERARCHY_INTERNAL procedure, with evidence that reports of this vulnerability...

CVE-2007-0272

The CVE-2007-0272 issue affects Oracle Database Server (MDSYS.MD package) and is confirmed by connected sources. A buffer overflow in MDSYS.MD allows remote authenticated users to crash the server or run arbitrary code, via public procedures in Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, ...

CVE-2007-4517

CVE-2007-4517 affects Oracle Database 10g Release 2, specifically the XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure. A buffer overflow is triggered by a long combined OWNER or NAME parameter, enabling remote authenticated attackers to execute arbitrary code. Exploitation evidence exists in multipl...

CVE-2012-0527

Technical details about CVE-2012-0527 are not publicly provided in the supplied documents. No product/version/impact specifics or remediation are disclosed here. Monitor for official updates from vendors and security advisories.

CVE-2014-6563

CVE-2014-6563 is described as an unspecified vulnerability in the Java VM component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 that could allow remote authenticated users to affect confidentiality via unknown vectors. The provided documents do not incl...

CVE-2015-4925

The CVE-2015-4925 entry concerns Oracle Database Server’s Workspace Manager in version 11.2.0.4, described as an unspecified vulnerability that could, via unknown vectors, affect confidentiality, integrity, and availability when accessed by remote authenticated users. The linked records reaffirm ...

CVE-2024-21251

CVE-2024-21251 — Oracle Database Server Java VM component affected versions: 19.3–19.24, 21.3–21.15, 23.4–23.5. Cause: insufficient input validation in the Java VM component. Impact: a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net ca...

CVE-2003-0095

The CVE-2003-0095 entry concerns a buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6. The vulnerability permits remote code execution via a long username supplied during login, exploitable through client applications that perform their own authentication, demonstra...