CVE-2009-1972: Oracle Database Server

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.

Affected products

• Oracle Database Server: version 9.2.0.8 only; version 9.2.0.8dv only; version 10.1.0.5 only; version 10.2.0.4 only; version 11.1.0.7 only

Published 2009-10-22. Last modified 2026-06-16.