Oracle Database 11g vulnerabilities

14 CVEs affecting Oracle Database 11g, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0992, published 2009-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0978, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 16.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a…
CVE-2009-0991, published 2009-04-15. Medium severity, CVSS 5.0. EPSS: 15.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a…
CVE-2009-0981, published 2009-04-15. Medium severity, CVSS 4.0. EPSS: 5.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous…
CVE-2009-0985, published 2009-04-15. High severity, CVSS 7.1. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality,…
CVE-2009-0975, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a…
CVE-2009-0980, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP.
CVE-2009-0976, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM.
CVE-2009-0986, published 2009-04-15. Medium severity, CVSS 5.4. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2008-1820, published 2008-04-16. Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. …
CVE-2009-0992, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to…

Latest

CVE-2009-0988, published 2009-04-15. Low severity, CVSS 2.1. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2009-0984, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to…