CVE-2008-3976

3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.4%

top 37.58%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Database 10G Oracle Database 9I

Timeline

PublishedOct 14

Latest updateMay 2

Description

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-3413 and CVE-2009-3414.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 8.0 | Impact: 4.9

Affected Packages2 packages

▶NVDoracle/database_9i9.2.0.8, 9.2.0.8dv+1

▶NVDoracle/database_10g10.1.0.5, 10.2.0.3+1

🔴Vulnerability Details

GHSA

GHSA-fg84-7476-jjh7: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2022-05-02

▶

CVEList

CVE-2008-3976: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2008-10-14

▶