CVE-2012-3220: Oracle Database Server

High severity, CVSS 9.0. EPSS: 2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors.

Affected products

• Oracle Database Server: version 10.2.0.3 only; version 10.2.0.4 only; version 10.2.0.5 only; version 11.1.0.7 only; version 11.2.0.2 only; version 11.2.0.3 only

Published 2013-01-17. Last modified 2026-06-16.