Oracle Database 10G vulnerabilities

37 known vulnerabilities affecting oracle/database_10g.

Total CVEs
37
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM35LOW1

Vulnerabilities

Page 1 of 2
CVE-2009-0985HIGHCVSS 7.1v10.1.0.5v10.2.0.42009-04-15
CVE-2009-0985 [HIGH] CVE-2009-0985: Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11. Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.
nvd
CVE-2009-0986MEDIUMCVSS 5.4v10.2.0.42009-04-15
CVE-2009-0986 [MEDIUM] CVE-2009-0986: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2009-0977MEDIUMCVSS 5.5v10.1.0.5v10.2.0.32009-04-15
CVE-2009-0977 [MEDIUM] CVE-2009-0977: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 1 Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is
nvd
CVE-2009-0978MEDIUMCVSS 5.5v10.2.0.42009-04-15
CVE-2009-0978 [MEDIUM] CVE-2009-0978: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0975.
nvd
CVE-2009-0980MEDIUMCVSS 5.5v10.2.0.32009-04-15
CVE-2009-0980 [MEDIUM] CVE-2009-0980: Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 a Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP.
nvd
CVE-2009-0992MEDIUMCVSS 5.5v10.1.0.5v10.2.0.42009-04-15
CVE-2009-0992 [MEDIUM] CVE-2009-0992: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, a Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injec
nvd
CVE-2009-0984MEDIUMCVSS 5.5v10.2.0.42009-04-15
CVE-2009-0984 [MEDIUM] CVE-2009-0984: Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, an Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL.
nvd
CVE-2009-0975MEDIUMCVSS 5.5v10.2.0.42009-04-15
CVE-2009-0975 [MEDIUM] CVE-2009-0975: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978.
nvd
CVE-2009-0976MEDIUMCVSS 5.5v10.2.0.42009-04-15
CVE-2009-0976 [MEDIUM] CVE-2009-0976: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM.
nvd
CVE-2009-0991MEDIUMCVSS 5.0PoCv10.1.0.5v10.2.0.42009-04-15
CVE-2009-0991 [MEDIUM] CVE-2009-0991: Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970.
nvd
CVE-2009-0973MEDIUMCVSS 5.0v10.1.0.52009-04-15
CVE-2009-0973 [MEDIUM] CVE-2009-0973: Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors.
nvd
CVE-2008-3978MEDIUMCVSS 5.5v10.1.0.52009-01-14
CVE-2008-3978 [MEDIUM] CVE-2008-3978: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2008-3999MEDIUMCVSS 4.0v10.1.0.52009-01-14
CVE-2008-3999 [MEDIUM] CVE-2008-3999: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10 Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
nvd
CVE-2008-3997MEDIUMCVSS 4.0v10.1.0.5v10.2.0.32009-01-14
CVE-2008-3997 [MEDIUM] CVE-2008-3997: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allo Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect availability, related to SYS.DBMS_XSOQ_ODBO.
nvd
CVE-2008-3979MEDIUMCVSS 5.5PoCv10.1.0.5v10.2.0.22009-01-14
CVE-2008-3979 [MEDIUM] CVE-2008-3979: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 a Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulner
nvd
CVE-2008-4015MEDIUMCVSS 5.5v10.1.0.52009-01-14
CVE-2008-4015 [MEDIUM] CVE-2008-4015: Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH.
nvd
CVE-2008-5439MEDIUMCVSS 4.0v10.2.0.42009-01-14
CVE-2008-5439 [MEDIUM] CVE-2008-5439: Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows r Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2008-5436MEDIUMCVSS 5.5v10.1.0.5v10.2.0.42009-01-14
CVE-2008-5436 [MEDIUM] CVE-2008-5436: Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0 Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors.
nvd
CVE-2008-5437MEDIUMCVSS 5.5v10.1.0.5v10.2.0.42009-01-14
CVE-2008-5437 [MEDIUM] CVE-2008-5437: Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5 Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_IJOB.
nvd
CVE-2008-3973LOWCVSS 1.7v10.1.0.5v10.1.2.3+4 more2009-01-14
CVE-2008-3973 [LOW] CVE-2008-3973: Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local user Unspecified vulnerability in the SQL*Plus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors.
nvd
1 / 2Next →