CVE-2009-3413 — Oracle Database 10G vulnerability

9 documents3 sources
Severity
5.5MEDIUMNVD
NVD4.9NVD3.2
EPSS
0.4%
top 40.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Oracle Database 10GOracle Database 9IOracle Database Server
Timeline
PublishedJan 13
Latest updateMay 2

Description

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2008-3976 and CVE-2009-3414.

CVSS vector

AV:N/AC:H/C:P/I:P/A:NExploitability: 3.2 | Impact: 4.9

Affected Packages3 packages

▶NVDoracle/database_9i9.2.0.8, 9.2.0.8dv+1
▶NVDoracle/database_10g10.1.0.5, 10.2.0.3+1
▶NVDoracle/database_server4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

6
GHSA
GHSA-fg84-7476-jjh7: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2022-05-02
▶
GHSA
GHSA-w3pg-w64r-37j8: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2022-05-02
▶
GHSA
GHSA-g4vp-9w9q-qppx: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2022-05-02
▶
CVEList
CVE-2009-3414: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2010-01-13
▶
CVEList
CVE-2009-3413: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9↗2010-01-13
▶
CVE-2009-3413 — Oracle Database 10G vulnerability | cvebase