Oracle Database Server vulnerabilities
502 known vulnerabilities affecting oracle/database_server.
Total CVEs
502
CISA KEV
0
Public exploits
29
Exploited in wild
0
Severity breakdown
CRITICAL112HIGH71MEDIUM250LOW69
Vulnerabilities
Page 16 of 26
CVE-2009-1993MEDIUMCVSS 5.5v3.0.12009-10-22
CVE-2009-1993 [MEDIUM] CVE-2009-1993: Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remot
Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.
nvd
CVE-2009-2000MEDIUMCVSS 5.0v11.1.0.72009-10-22
CVE-2009-2000 [MEDIUM] CVE-2009-2000: Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote
Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2009-1018MEDIUMCVSS 5.5v10.2.0.42009-10-22
CVE-2009-1018 [MEDIUM] CVE-2009-1018: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remo
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC).
nvd
CVE-2009-1997MEDIUMCVSS 5.0v10.2.0.3v11.1.0.72009-10-22
CVE-2009-1997 [MEDIUM] CVE-2009-1997: Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 a
Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
nvd
CVE-2009-1994MEDIUMCVSS 6.5v10.1.0.52009-10-22
CVE-2009-1994 [MEDIUM] CVE-2009-1994: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.
nvd
CVE-2009-1964MEDIUMCVSS 5.5v10.2.0.42009-10-22
CVE-2009-1964 [MEDIUM] CVE-2009-1964: Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remo
Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2009-1007MEDIUMCVSS 6.5v10.2.0.42009-10-22
CVE-2009-1007 [MEDIUM] CVE-2009-1007: Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote aut
Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS.
nvd
CVE-2009-2001MEDIUMCVSS 6.5v10.2.0.4v11.1.0.72009-10-22
CVE-2009-2001 [MEDIUM] CVE-2009-2001: Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows re
Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2009-1972LOWCVSS 2.1v9.2.0.8v9.2.0.8dv+3 more2009-10-22
CVE-2009-1972 [LOW] CVE-2009-1972: Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5,
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.
nvd
CVE-2009-1991LOWCVSS 3.6v9.2.0.8v9.2.0.8dv+2 more2009-10-22
CVE-2009-1991 [LOW] CVE-2009-1991: Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that th
nvd
CVE-2009-1971LOWCVSS 3.5v10.1.0.5v10.2.0.3+1 more2009-10-22
CVE-2009-1971 [LOW] CVE-2009-1971: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2009-1020CRITICALCVSS 9.0PoCv9.2.0.8v9.2.0.8dv+3 more2009-07-14
CVE-2009-1020 [CRITICAL] CVE-2009-1020: Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV,
Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2009-1963HIGHCVSS 7.5PoCv11.1.0.62009-07-14
CVE-2009-1963 [HIGH] CVE-2009-1963: Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows rem
Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.
nvd
CVE-2009-1019HIGHCVSS 7.5PoCv9.2.0.8v9.2.0.8dv+3 more2009-07-14
CVE-2009-1019 [HIGH] CVE-2009-1019: Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.
Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
nvd
CVE-2009-0987MEDIUMCVSS 5.5v9.2.0.8v9.2.0.8dv+2 more2009-07-14
CVE-2009-0987 [MEDIUM] CVE-2009-0987: Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5,
Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2009-1968MEDIUMCVSS 4.3PoCv10.1.8.32009-07-14
CVE-2009-1968 [MEDIUM] CVE-2009-1968: Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allo
Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups pa
nvd
CVE-2009-1967MEDIUMCVSS 5.5v11.1.0.72009-07-14
CVE-2009-1967 [MEDIUM] CVE-2009-1967: Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2)
Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.
nvd
CVE-2009-1015MEDIUMCVSS 4.0v9.2.0.8v9.2.0.8dv+2 more2009-07-14
CVE-2009-1015 [MEDIUM] CVE-2009-1015: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors.
nvd
CVE-2009-1021MEDIUMCVSS 5.5v9.2.0.8v9.2.0.8dv+2 more2009-07-14
CVE-2009-1021 [MEDIUM] CVE-2009-1021: Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8D
Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
nvd
CVE-2009-1970MEDIUMCVSS 5.0PoCv9.2.0.8v9.2.0.8dv+3 more2009-07-14
CVE-2009-1970 [MEDIUM] CVE-2009-1970: Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5,
Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.
nvd