CVE-2007-5504: Oracle Database Server

Medium severity, CVSS 6.5. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25). NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package.

Affected products

• Oracle Database Server: version 9.0.1.5 only; version 10.1.0.5 only

Published 2007-10-17. Last modified 2026-06-16.