CVE-2009-0985 — Oracle Database 10G vulnerability

3 documents3 sources
Severity
7.1HIGHNVD
EPSS
1.3%
top 20.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Database 10GOracle Database 11G
Timeline
PublishedApr 15
Latest updateMay 2

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/database_10g10.1.0.5, 10.2.0.4+1
▶NVDoracle/database_11g11.1.0.6

🔴Vulnerability Details

2
GHSA
GHSA-hj47-v9v9-c38f: Unspecified vulnerability in the Core RDBMS component in Oracle Database 10↗2022-05-02
▶
CVEList
CVE-2009-0985: Unspecified vulnerability in the Core RDBMS component in Oracle Database 10↗2009-04-15
▶
CVE-2009-0985 — Oracle Database 10G vulnerability | cvebase