CVE-2008-3990: Oracle Database 10g

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to OLAPSYS.CWM2_OLAP_AW_AWUTIL, a different vulnerability than CVE-2008-3991.

Affected products

• Oracle Database 10g: version 10.1.0.5 only
• Oracle Database 9i: version 9.2.0.8 only; version 9.2.0.8dv only

Published 2008-10-14. Last modified 2026-06-16.