CVE-2014-4245

CVE-2014-4245 is an unspecified vulnerability in the RDBMS Core of Oracle Database Server affecting 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The impact is limited to confidentiality and requires remote authenticated access; vectors are unknown. CVSS v2 base score reported as 3.5 (low). Public ...

CVE-2018-2875

Oracle Database Server CVE-2018-2875 affects the Core RDBMS component in Oracle Database Server and targets 12.2.0.1, 18c, and 19c. A low-privilege attacker with Create Session and network access via OracleNet can read a subset of Core RDBMS data. The vulnerability’s CVSS v3.0 base score is 5.0 (...

CVE-2019-2484

CVE-2019-2484 affects Oracle Database Server’s Application Express component, specifically versions 5.1 and 18.2. The flaw allows a low-privileged attacker with a valid account and network access via HTTP to compromise Application Express, with human interaction required. Successful exploitation ...

CVE-2024-21251

CVE-2024-21251 — Oracle Database Server Java VM component affected versions: 19.3–19.24, 21.3–21.15, 23.4–23.5. Cause: insufficient input validation in the Java VM component. Impact: a low-privileged attacker with Create Session and Create Procedure privileges and network access via Oracle Net ca...

CVE-2003-0095

The CVE-2003-0095 entry concerns a buffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6. The vulnerability permits remote code execution via a long username supplied during login, exploitable through client applications that perform their own authentication, demonstra...

CVE-2012-0527

Technical details about CVE-2012-0527 are not publicly provided in the supplied documents. No product/version/impact specifics or remediation are disclosed here. Monitor for official updates from vendors and security advisories.

CVE-2015-2595

CVE-2015-2595 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 where the Oracle OLAP component contains an unspecified vulnerability that can be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The connected OpenVAS entry and ...

CVE-2006-0263

CVE-2006-0263 affects Oracle Database Server versions 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1. The Oracle CPU-Jan-2006 vulnerabilities DB09 (Net Listener) and DB12/DB13 (Network Communications RPC) are cited as the root issues. The described flaws are “unspecified” in impa...

CVE-2006-0267

CVE-2006-0267 affects Oracle Database Server 9.2.0.6 and 10.1.0.4, specifically the Query Optimizer component. The vulnerability’s impact is described as unspecified by Oracle Vuln# DB20, with the NVD entry noting a high base score (CVSS v2: 9.0) and a network attack vector with required low comp...

CVE-2007-0274

CVE-2007-0274 affects Oracle Database 9.2.0.7 and 10.1.0.5. The Connected document notes buffer overflow issues in DBMS_LOGREP_UTIL.GET_OBJECT_NAME (DB08) and in SYS.DBMS_CAPTURE_ADM_INTERNAL procedures CREATE_CAPTURE, ALTER_CAPTURE, and ABORT_TABLE_INSTANTIATION (DB09). The exact impact and atta...

CVE-2008-0348

Technical details for CVE-2008-0348 are not publicly available in the provided documents. Monitor for updates in the connected sources.

CVE-2012-1708

CVE-2012-1708 affects the Oracle Database Server’s Application Express component, specifically versions 4.0 and 4.1. The vulnerability is described as unspecified, allowing remote attackers to affect integrity via unknown vectors. Connected sources reiterate the same vendor/product scope; no conc...

CVE-2013-1538

CVE-2013-1538 affects Oracle Database Server 11.2.0.2 and 11.2.0.3 in the Network Layer component, enabling remote impact to availability via unknown vectors. The vulnerability is described as unspecified in the Network Layer, with no exploited details provided in the initial or connected documen...

CVE-2014-6563

CVE-2014-6563 is described as an unspecified vulnerability in the Java VM component of Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 that could allow remote authenticated users to affect confidentiality via unknown vectors. The provided documents do not incl...

CVE-2015-0370

CVE-2015-0370 corresponds to an unspecified vulnerability in Oracle Database Server’s Core RDBMS component. The initial description lists affected Oracle Database Server versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1, with remote authenticated access impacting integrity (no confidentiality i...

CVE-2015-4925

The CVE-2015-4925 entry concerns Oracle Database Server’s Workspace Manager in version 11.2.0.4, described as an unspecified vulnerability that could, via unknown vectors, affect confidentiality, integrity, and availability when accessed by remote authenticated users. The linked records reaffirm ...

CVE-2016-5505

CVE-2016-5505 affects Oracle Database Server (RDBMS Programmable Interface) in versions 11.2.0.4 and 12.1.0.2. The vulnerability is local and allows an attacker to affect confidentiality via unknown vectors; the CVSSv3 base score is 5.5 (Medium) with local access, low attack complexity, and no us...

CVE-2019-2940

Oracle Database Server Core RDBMS vulnerability CVE-2019-2940 affects Oracle Database Server Core RDBMS for versions 12.1.0.2, 12.2.0.1, and 18c. An attacker with Create Session privilege and local logon can compromise the Core RDBMS, potentially enabling unauthorized updates, inserts, or deletes...

CVE-2019-2956

CVE-2019-2956 affects Oracle Database Server: Core RDBMS (jackson-databind). Affected versions: 12.1.0.2, 12.2.0.1, 18c, 19c. Vulnerability allows a low-privileged attacker with Create Session and network access via multiple protocols to cause a hang or crash (DOS) of Core RDBMS (jackson-databind...

CVE-2003-0222

CVE-2003-0222 : A stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows an attacker to execute arbitrary code via a CREATE DATABASE LINK query containing a connect string with a long USING parameter. The vulnerability requires a valid databa...

CVE-2005-3445

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2006-0265

CVE-2006-0265 involves multiple vulnerabilities in Oracle Database server (versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, 10.2.0.1). Connected sources (PRION entries) describe a likely SQL injection in CTXSYS and program interface/network components (DB17/DB18), with specific function names cited:...

CVE-2006-7141

CVE-2006-7141 is an Oracle Database Server directory traversal vulnerability in the UTL_FILE package. When utl_file_dir is wildcarded or CREATE ANY DIRECTORY to PUBLIC privileges exist, remote authenticated users may read or modify arbitrary files via full file paths to utl_file functions such as...

CVE-2007-4517

CVE-2007-4517 affects Oracle Database 10g Release 2, specifically the XDB_PITRIG_PKG.PITRIG_DROPMETADATA procedure. A buffer overflow is triggered by a long combined OWNER or NAME parameter, enabling remote authenticated attackers to execute arbitrary code. Exploitation evidence exists in multipl...

CVE-2009-1985

CVE-2009-1985 is listed in the Oracle October 2009 CPU as affecting Oracle Database components (9.2.0.8/9.2.0.8DV, 10.1.0.5, 10.2.0.4) with a vulnerability in the Network Authentication area. The Oracle Risk Matrix attributes a remote, unauthenticated exploit (Network access) with a CVSS v2 base ...

CVE-2010-0853

Technical details for CVE-2010-0853 are not publicly available in the provided documents. No concrete affected product/version or exploit information is provided. Monitor for updates in connected sources for any published specifics.

CVE-2012-0528

CVE-2012-0528 is linked to Oracle Enterprise Manager (Database Control 10.2.0.5, 11.1.0.7 and related patchsets). The connected advisory describes a session fixation vulnerability where Oracle Enterprise Manager authenticates a web user without invalidating the existing session ID, enabling an at...

CVE-2012-1737

CVE-2012-1737 is an unspecified vulnerability reported in Oracle Enterprise Manager/DB components (e.g., Oracle Database Server 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Grid Control/Plugin components) that allowed remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

CVE-2014-0377

CVE-2014-0377 affects Oracle Database Server’s Core RDBMS component on 11.1.0.7, 11.2.0.3/11.2.0.4, and 12.1.0.1. The vulnerability allows remote authenticated users to breach confidentiality via vectors related to SYS tables. The NVD entry lists a CVSSv2 base score of 4.0 (MEDIUM) with network a...

CVE-2002-0567

Oracle 8i/9i with PL/SQL EXTPROC vulnerable: remote attackers can bypass authentication and connect via the TNS Listener to the extproc process to execute arbitrary functions. Impact is remote code execution with the Oracle user’s privileges; no explicit exploit code/status is provided in the doc...

CVE-2004-1338

CVE-2004-1338 affects Oracle 9i and 10g. The flaw lets local users escalate privileges by abusing CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to seed arbitrary functions into SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then deleting from SDO_TXN_IDX_INSERTS to trigger SDO_CMT_CBK_TRIG, which executes ...

CVE-2006-0258

Oracle Database Server versions 8.1.7.4 and 9.0.1.5 are affected in the Connection Manager component by CVE-2006-0258. The vulnerability is described as unspecified in impact and attack vectors (Oracle Vuln# DB03); no root cause, exploit details, or official fix are provided in the connected docu...

CVE-2006-0547

CVE-2006-0547 affects Oracle Database 8i, 9i, and 10g. The issue arises in the authentication phase of the Transparent Network Substrate (TNS) protocol where a modified AUTH_ALTER_SESSION attribute can be exploited by remote authenticated users to execute arbitrary SQL statements in the context o...

CVE-2006-1869

CVE-2006-1869: Unspecified vulnerability in Oracle Database Server versions 8.1.7.4 and 9.0.1.5 affects the Dictionary component (DB04). The initial description notes unknown impact and attack vectors; connected documents corroborate that this vulnerability is associated with Oracle’s Dictionary,...

CVE-2007-2119

CVE-2007-2119 is an XSS vulnerability in the Administration Front End for Oracle Enterprise (Ultra) Search. The issue affects boundary_rules.jsp and allows remote attackers to inject arbitrary HTML or script via the EXPTYPE parameter. Affected components include the Oracle Database Server variant...

CVE-2007-3853

CVE-2007-3853 affects Oracle Database 10.1.0.5 and 10.2.0.3. The vulnerabilities are in DBMS_JAVA_TEST (JavaVM), Oracle Text, and MDSYS.SDO_GEOR_INT (Spatial). Exact root causes and impact are not fully detailed in the provided documents, but a researcher notes DB01 may be SQL injection in DBMS_P...

CVE-2009-1991

CVE-2009-1991 affects Oracle Database (9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4) in the CTXSYS.DRVXTABC.CREATE_TABLES PL/SQL call. The vulnerability is a SQL injection in the create_tables procedure (idx_owner and idx_name parameters) that can be exploited by remote authenticated users, impacting c...

CVE-2009-3413

CVE-2009-3413 affects Oracle Database with the Spatial component in versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3. The vulnerability is exploitable remotely over Oracle Net by an authenticated user to impact confidentiality and integrity (vector: network, session creation). The NECESSARY ro...

CVE-2011-3512

CVE-2011-3512 is an Oracle Database Core RDBMS vulnerability affecting Oracle Database Server 10.1.0.5, 10.2.0.3–10.2.0.5, 11.1.0.7, and 11.2.0.2. The issue arises in the handling of spatial datatypes, enabling a remote-authenticated user with create table/procedure privileges to escalate to SYSD...

CVE-2014-2478

CVE-2014-2478 affects Oracle Database Server (Core RDBMS) versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality via unknown vectors; the exact root cause and exploit details are not disclosed in the ...

CVE-2015-4740

CVE-2015-4740 is an Oracle Database Server vulnerability in the RDBMS Partitioning component affecting versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Connected s...

CVE-2025-30751

CVE-2025-30751 affects Oracle Database Server (Oracle Database component). Affected supported versions are 19.27 and 23.4–23.8. The flaw enables a low-privileged attacker who has Create Session and Create Procedure privileges with network access via Oracle Net to compromise the database, potentia...

CVE-2005-3437

Technical details about CVE-2005-3437 are not publicly available in the provided connected documents; the entries describe an unspecified vulnerability in Oracle PL/SQL with unknown impact. Monitor for updates.

CVE-2007-0268

CVE-2007-0268 affects Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5, with vulnerabilities in Advanced Queuing (sys.dbms_aqsys.dbms_aq privileges DB01), Advanced Replication (sys.dbms_repcat_untrusted DB07), and Oracle Text (ctxload DB15). The underlying impact/attack vectors are not fully detail...

CVE-2007-2116

Summary of CVE-2007-2116 (Oracle DB): A buffer overflow in the Oracle Database Advanced Replication component, specifically in package SYS.DBMS_SNAP_INTERNAL, affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The vulnerability may allow remote command execution via the SNAP_OWNER or SNAP_N...

CVE-2007-5520

Technical details for CVE-2007-5520 are not publicly provided in the supplied documents; the entry remains with unspecified impact and remote vectors. Monitor for updates from official advisories to obtain affected products, versions, and remediation guidance.

CVE-2018-2575

CVE-2018-2575 concerns Oracle Database Server — Core RDBMS component. Affects Windows platforms for the following Oracle Database versions: 11.2.0.4, 12.1.0.2, and 12.2.0.1. The vulnerability is exploitable by a user with Local Logon privilege who can access the system over multiple network proto...

CVE-2006-0262

Technical details for CVE-2006-0262 are not publicly provided in the supplied documents; no explicit affected versions or remediation are included. Monitor for updates.

CVE-2007-3857

CVE-2007-3857 affects Oracle Database 10.1.0.5, with vulnerabilities in the Oracle Text component (including vectors DB05, CTXSYS.DRVXMD, CTXSYS.DRI_MOVE_CTXSYS, CTXSYS.DRVXMD) and in JavaVM. The issue allows remotely authenticated users to impact confidentiality, integrity, and availability (per...

CVE-2007-5531

Technical details are not publicly available in the provided documents for CVE-2007-5531. The entry only notes an unspecified vulnerability in Oracle Help for Web with unknown impact and remote vectors. No vendor/version/patch details are given. Monitor for updates.