CVE-2008-3996: Oracle Database 10g

Medium severity, CVSS 5.5. EPSS: 9.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_IPUBLISH.

Affected products

• Oracle Database 10g: version 10.1.0.5 only; version 10.2.0.4 only
• Oracle Database 11i: version 11.1.0.6 only

Published 2008-10-14. Last modified 2026-06-16.