Oracle Database 10g vulnerabilities

37 CVEs affecting Oracle Database 10g, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0992, published 2009-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3984, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3983, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3979, published 2009-01-14. Medium severity, CVSS 5.5. EPSS: 32.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. …
CVE-2009-0978, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a…
CVE-2009-0991, published 2009-04-15. Medium severity, CVSS 5.0. EPSS: 15.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a…
CVE-2008-3982, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 11.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-2595, published 2008-07-15. Medium severity, CVSS 5.0. EPSS: 11.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous…
CVE-2008-3995, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 9.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related…
CVE-2008-3996, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 9.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related…
CVE-2009-0973, published 2009-04-15. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors.

Latest

CVE-2009-0992, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to…
CVE-2009-0986, published 2009-04-15. Medium severity, CVSS 5.4. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2009-0985, published 2009-04-15. High severity, CVSS 7.1. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality,…
CVE-2009-0984, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to…
CVE-2009-0980, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP.
CVE-2009-0977, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity,…
CVE-2009-0976, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM.
CVE-2009-0975, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a…