CVE-2011-2232: Oracle Database Server

Medium severity, CVSS 6.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, and Oracle Fusion Middleware 10.1.3.5, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected products

• Oracle Database Server: version 10.1.0.5 only; version 10.2.0.3 only; version 10.2.0.4 only; version 11.1.0.7 only; version 11.2.0.1 only
• Oracle Fusion Middleware: version 10.1.3.5 only

Published 2011-07-20. Last modified 2026-06-16.