CVE-2011-3525 — Oracle Database Server vulnerability

3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.9%
top 23.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Database Server
Timeline
PublishedOct 18
Latest updateMay 17

Description

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/database_server3.2, 4.0+1

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4ghg-87jg-84gj: Unspecified vulnerability in the Application Express component in Oracle Database Server 3↗2022-05-17
▶
CVEList
CVE-2011-3525: Unspecified vulnerability in the Application Express component in Oracle Database Server 3↗2011-10-18
▶
CVE-2011-3525 — Oracle Database Server vulnerability | cvebase