Oracle Data Pump Component vulnerabilities

2 CVEs affecting Oracle Data Pump Component, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2608, published 2008-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-2608, published 2008-07-15. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILE_INT.
CVE-2008-2602, published 2008-07-15. Medium severity, CVSS 4.6. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE…