Oracle Database 11i vulnerabilities

8 CVEs affecting Oracle Database 11i, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5437, published 2009-01-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3984, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3983, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3982, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 11.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3995, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 9.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related…
CVE-2008-3996, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 9.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related…
CVE-2008-5437, published 2009-01-14. Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity,…
CVE-2008-4005, published 2008-10-14. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown…
CVE-2008-3994, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…