CVE-2007-2117: Oracle Database Server

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB12. NOTE: as of 20070424, Oracle has not disputed reliable claims that this involves a buffer overflow in the ctxsrv server daemon.

Affected products

• Oracle Database Server: version 9.2.0.5 only

Published 2007-04-18. Last modified 2026-06-16.