CVE-2009-1997: Oracle Database Server

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.

Affected products

• Oracle Database Server: version 10.2.0.3 only; version 11.1.0.7 only

Published 2009-10-22. Last modified 2026-06-16.