CVE-2007-3859

Technical details for CVE-2007-3859 are not publicly available in the provided documents. No specifics on affected product version, root cause, or impact are given here; monitor for updates.

CVE-2010-0853

Technical details for CVE-2010-0853 are not publicly available in the provided documents. No concrete affected product/version or exploit information is provided. Monitor for updates in connected sources for any published specifics.

CVE-2012-1737

CVE-2012-1737 is an unspecified vulnerability reported in Oracle Enterprise Manager/DB components (e.g., Oracle Database Server 11.1.0.7, 11.2.0.2/11.2.0.3 and EM Grid Control/Plugin components) that allowed remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

CVE-2020-2516

CVE-2020-2516 references a vulnerability in Oracle Database Server’s Core RDBMS component affecting Oracle versions 12.1.0.2, 12.2.0.1, 18c, and 19c. An attacker with Create Materialized View or Create Table privileges and network access via OracleNet could compromise Core RDBMS; exploitation req...

CVE-2001-1041

CVE-2001-1041 affects Oracle 8.0.x, 8.1.x, and 9.0.1. The vulnerability arises from a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by ORACLE_HOME, enabling local users to overwrite arbitrary files. The root cause is the mishandling of...

CVE-2005-0298

CVE-2005-0298 concerns Oracle 8i–10g DIRECTORY objects that expose the location of a specific operating system directory. Read access to such a DIRECTORY object can allow a user to obtain sensitive information about the OS directory path, indicating a potential information-disclosure risk. The pr...

CVE-2006-7141

CVE-2006-7141 is an Oracle Database Server directory traversal vulnerability in the UTL_FILE package. When utl_file_dir is wildcarded or CREATE ANY DIRECTORY to PUBLIC privileges exist, remote authenticated users may read or modify arbitrary files via full file paths to utl_file functions such as...

CVE-2007-2116

Summary of CVE-2007-2116 (Oracle DB): A buffer overflow in the Oracle Database Advanced Replication component, specifically in package SYS.DBMS_SNAP_INTERNAL, affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The vulnerability may allow remote command execution via the SNAP_OWNER or SNAP_N...

CVE-2007-2119

CVE-2007-2119 is an XSS vulnerability in the Administration Front End for Oracle Enterprise (Ultra) Search. The issue affects boundary_rules.jsp and allows remote attackers to inject arbitrary HTML or script via the EXPTYPE parameter. Affected components include the Oracle Database Server variant...

CVE-2009-1993

CVE-2009-1993 affects Oracle Application Express (Apex) within Oracle Database 3.0.1. The vulnerability allows remote authenticated users to affect confidentiality and integrity through FLOWS_030000.WWV_EXECUTE_IMMEDIATE. The October 2009 CPU includes a fix for this, as part of the Oracle Databas...

CVE-2012-0534

CVE-2012-0534 affects Oracle Database Server (RDBMS Core) versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.2/11.2.0.3. Description: an unspecified vulnerability in the RDBMS Core allows remote authenticated users to affect integrity via unknown vectors related to Create Session. Impact: partia...

CVE-2012-1746

CVE-2012-1746 concerns an unspecified vulnerability in the Oracle Database Server Network Layer on Windows, affecting versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.2/11.2.0.3. The vulnerability allows remote attackers to affect availability via unknown vectors; root cause details and exploi...

CVE-2013-5764

CVE-2013-5764 affects Oracle Database Server’s Core RDBMS in versions 11.1.0.7, 11.2.0.3, and 12.1.0.1. The vulnerability is described as unspecified and allows remote authenticated users to impact availability via unknown vectors. Root cause and exact exploit details are not provided in the init...

CVE-2014-2478

CVE-2014-2478 affects Oracle Database Server (Core RDBMS) versions 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality via unknown vectors; the exact root cause and exploit details are not disclosed in the ...

CVE-2016-5499

Technical details about CVE-2016-5499 are not provided in the supplied documents; no affected product versions, root cause, or remediation are disclosed. Monitor for updates.

CVE-2018-2575

CVE-2018-2575 concerns Oracle Database Server — Core RDBMS component. Affects Windows platforms for the following Oracle Database versions: 11.2.0.4, 12.1.0.2, and 12.2.0.1. The vulnerability is exploitable by a user with Local Logon privilege who can access the system over multiple network proto...

CVE-2003-0096

Oracle 9i/8i family affected by CVE-2003-0096 due to multiple buffer overflows in Oracle Database: TO_TIMESTAMP_TZ (long conversion string argument), TZ_OFFSET (long time zone argument), and BFILENAME (long DIRECTORY parameter). Remote code execution could be possible. Root cause: buffer overflow...

CVE-2005-3206

CVE-2005-3206 affects iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 (9.0.2.4). The issue enables remote attackers to cause a denial of service by sending an HTTP request with an sid parameter containing a STOP command, which can stop the TNS listener. The available connected documen...

CVE-2009-1992

CVE-2009-1992 affects Oracle Database Core RDBMS components (versions 9.2.0.8, 10.1.0.5, 10.2.0.4). The vulnerability allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors. The issue is listed in the Oracle October 2009 CPU with a Base Score of 10.0 (C...

CVE-2010-0867

CVE-2010-0867 targets Oracle Database JavaVM; connected advisories disclose a privilege escalation/command execution flaw in the DBMS_JAVA/DBMS_JVM_EXP_PERMS paths. Remote authenticated users with CREATE_SESSION can exploit the weakness to execute arbitrary OS commands, potentially with elevated ...

CVE-2014-2408

CVE-2014-2408 affects Oracle Database Server 11.1.0.7, 11.2.0.3/4, and 12.1.0.1, targeting the Core RDBMS component. The vulnerability is described as using unknown vectors related to the Grant Any Object Privilege and can potentially impact confidentiality and integrity when accessed by remote, ...

CVE-2015-0371

CVE-2015-0371 affects Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1. The vulnerability is described as an unspecified issue in the Core RDBMS component that allows remote authenticated users to affect integrity and availability via unknown vectors. The CVSS v2 base score is 4....

CVE-2026-71102

Oracle Database Server Portable Clusterware is affected in versions 19.3–19.32, 21.3–21.23, and 23.4.0–23.26.3. An unauthenticated remote attacker can exploit it via HTTP to gain unauthorized data modification/creation/deletion and cause a complete denial of service (hang or crash). CVSS 3.1 scor...

CVE-2006-0287

Affected software: Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2. The CVE-2006-0287 entry is described as an unspecified vulnerability with unspecified impact/attack vectors per Oracle (Oracle Vuln# OHS02). Some connected sources (Oracle HTTP Se...

CVE-2006-1877

Technical details about CVE-2006-1877 are not provided in the supplied documents. The Oracle Spatial vulnerability is described as unspecified with unknown impact and vectors.

CVE-2007-2112

CVE-2007-2112 is an authentication bypass in Oracle Database 10.1.0.5 and 10.2.0.3 (DB05). The description states that remote authenticated users may bypass the AUTH_ALTER_SESSION policy via an AFTER LOGON ON DATABASE trigger, and notes this as related to CVE-2006-0547. The connected documents al...

CVE-2007-2117

CVE-2007-2117 concerns Oracle Text in Oracle Database 9.0.1.5+ and 9.2.0.5; the note from 2007 CPU claims a buffer overflow in the ctxsrv server daemon, but the impact and exploit details are not publicly provided in the supplied documents. No remediation/patch details are specified here.

CVE-2008-0341

The CVE-2008-0341 entry concerns Oracle Database’s Advanced Queuing component in versions 9.0.1.5 FIPS+ and 10.1.0.5, described as an unspecified vulnerability with unknown impact and remote attack vectors (DB03). Connected sources corroborate a family of unspecified Oracle Database vulnerabiliti...

CVE-2009-1964

CVE-2009-1964 affects Oracle Database 10.2.0.4 Workspace Manager. Description: an unspecified vulnerability that allows remote authenticated users to impact confidentiality and integrity via unknown vectors. CVSS (NVD) indicates network access with low complexity and partial confidentiality/integ...

CVE-2009-1995

CVE-2009-1995 is an Oracle Database vulnerability affecting the Advanced Queuing component (SYS.DBMS_AQ_INV) in Oracle Database 10.2.0.4 and 11.1.0.7. The issue allows remote authenticated users to impact confidentiality and integrity. The connected documents indicate this CVE was addressed in th...

CVE-2012-0511

CVE-2012-0511 refers to an unspecified vulnerability in the OCI component of Oracle Database Server (versions 10.2.0.3/10.2.0.4/11.1.0.7) that allows remote attackers to impact confidentiality and integrity via unknown vectors. Connected advisories reveal concrete details: the OCIPasswordChange A...

CVE-2012-3132

CVE-2012-3132 affects Oracle Database Server versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3. The vulnerability is a SQL injection in the database server that allows a remote authenticated user to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTX...

CVE-2013-5771

CVE-2013-5771 concerns Oracle Database Server XML Parser vulnerabilities in Oracle Database Server versions 11.1.0.7, 11.2.0.2, 11.2.0.3, and 12.1.0.1. The issue, described as an unspecified vulnerability in the XML Parser component, could allow remote attackers to affect confidentiality and avai...

CVE-2006-5345

CVE-2006-5345 is an unspecified vulnerability in the Oracle Spatial component of Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4. The entry notes remote authenticated attack vectors related to mdsys.sdo_geom and cites a possible relation to a length-checking issue in RELATE before MD2.RELATE is ca...

CVE-2009-1994

CVE-2009-1994 is an Oracle Database 10.1.0.5 vulnerability in the Spatial component (MDSYS.PRVT_CMT_CBK). The issue is listed under the October 2009 CPU with CVSS v2 base score 6.5 (MEDIUM). It can be triggered by an authenticated remote user via Oracle Net to execute code on MDSYS.PRVT_CMT_CBK, ...

CVE-2009-3415

Concrete details available: CVE-2009-3415 is listed in Oracle CPU January 2010 as affecting Oracle OLAP within Oracle Database 9.2.0.8/9.2.0.8DV, 10.1.0.5 and 10.2.0.3. The vulnerability is mapped to Oracle OLAP with remote impact pathway requiring an authenticated session (Remote Exploit without...

CVE-2010-0870

CVE-2010-0870 affects Oracle Database 9.2.0.8 and 9.2.0.8DV in the Change Data Capture component, related to SYS.DBMS_CDC_PUBLISH. Connected sources describe a SQL injection flaw in the DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE procedure that can be exploited by any user with execute privilege (default...

CVE-2010-0892

CVE-2010-0892 affects Oracle Application Express (Apex) within Oracle Database Server 3.2.0.00.27. The vulnerability is described as unspecified, allowing remote attackers to affect integrity via unknown vectors. Oracle’s July 2010 CPU documents this CVE under Oracle Database Server, with the Ape...

CVE-2013-5853

CVE-2013-5853 is an Oracle Database Server Core RDBMS vulnerability affecting versions 11.1.0.7, 11.2.0.3, and 12.1.0.1 that could allow remote attackers to affect availability via unknown vectors. Connected sources corroborate the Core RDBMS impact and list this CVE among fixes in the January 20...

CVE-2014-4298

CVE-2014-6542 is an Oracle Database Server vulnerability affecting the SQLJ component in versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, 12.1.0.2 . The issue allows remote authenticated users to affect confidentiality via unknown vectors. This is described as a separate vulnerability from CVE-20...

CVE-2014-6542

Technical details for CVE-2014-6542 are not publicly provided in the connected documents. The sources lack explicit affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2016-5498

Technical details for CVE-2016-5498 are not publicly provided in the supplied documents. No concrete affected product/version or remediation is included here. Monitor for updates in the connected sources.

CVE-2019-2939

CVE-2019-2939 affects Oracle Database Server’s Core RDBMS component. Affected versions include 12.2.0.1, 18c, and 19c. The vulnerability allows a low-privileged attacker with Create Session privilege and network access via OracleNet to compromise Core RDBMS, potentially leading to unauthorized re...

CVE-2001-0942

The CVE concerns Oracle 8.1.6 and 8.1.7 where dbsnmp uses the ORACLE_HOME environment variable to locate and execute the dbsnmp program. A local user can point ORACLE_HOME to an attacker-controlled directory that contains a malicious dbsnmp, enabling arbitrary code execution with local privileges...

CVE-2005-3440

Technical details about CVE-2005-3440 are not provided in the supplied documents. No affected product/version or concrete impact is documented here; monitor for updates.

CVE-2005-3641

CVE-2005-3641 affects Oracle Databases running on Windows XP with Simple File Sharing enabled. The vulnerability allows remote attackers to bypass authentication by supplying a valid username. The available documents describe the affected environment and authentication bypass impact but do not pr...

CVE-2006-0286

The CVE-2006-0286 entry concerns Oracle HTTP Server in Oracle Database Server (various versions). The connected documents identify an unspecified vulnerability with unspecified impact/attack vectors (Oracle Vuln# OHS01) and reference multiple advisories noting potential information disclosure and...

CVE-2006-2505

The CVE-2006-2505 entry affects Oracle Database Server 10g Release 2. the issue arises in the DBMS_EXPORT_EXTENSION package, specifically the functions GET_DOMAIN_INDEX_TABLES and GET_V2_DOMAIN_INDEX_TABLES, where a reference to a malicious package in the TYPE_NAME argument can let local users ru...

CVE-2006-3700

CVE-2006-3700 affects Oracle Database 9.2.0.6 and 10.1.0.4 with two concerns (DB04 DAV and DB23 XMLDB). The NVD entry notes unknown impact/attack vectors. A Nessus July 2006 CPU plugin associates CVE-2006-3700 with missing CPU and lists impacted components including DAV/XMLDB; remediation guidanc...

CVE-2007-3855

CVE-2007-3855 affects multiple Oracle Database versions (9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3) with vulnerabilities in the DataGuard component (SYS.DRMS), the PL/SQL component (SYS.DBMS_STANDARD), the Spatial component (MDSYS.RTREE_IDX), and the SQL Compiler (DB17). The description no...