CVE-2007-5513: Oracle Database Server

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.

Affected products

• Oracle Database Server: version 9.2.0.8 only; version 9.2.0.8dv only; version 10.1.0.5 only

Published 2007-10-17. Last modified 2026-06-16.