CVE-2008-3991

3 documents3 sources

Severity

4.0MEDIUM

EPSS

0.8%

top 25.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Database 10G Oracle Database 9I

Timeline

PublishedOct 14

Latest updateMay 2

Description

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3990.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/database_9i9.2.0.8, 9.2.0.8dv+1

▶NVDoracle/database_10g10.1.0.5

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-5x69-q27x-jmpr: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9↗2022-05-02

▶

CVEList

CVE-2008-3991: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9↗2008-10-14

▶