Oracle Database 9i vulnerabilities

25 CVEs affecting Oracle Database 9i, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0991, published 2009-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-3984, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3983, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 41.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2009-0991, published 2009-04-15. Medium severity, CVSS 5.0. EPSS: 15.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a…
CVE-2008-3982, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 11.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-2595, published 2008-07-15. Medium severity, CVSS 5.0. EPSS: 11.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous…
CVE-2008-2607, published 2008-07-15. Medium severity, CVSS 6.5. EPSS: 3.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related…
CVE-2009-0979, published 2009-04-15. High severity, CVSS 9.0. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via…
CVE-2008-1812, published 2008-04-16. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has…
CVE-2008-1820, published 2008-04-16. Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. …
CVE-2008-2625, published 2008-10-14. Medium severity, CVSS 4.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown…

Latest

CVE-2009-0984, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to…
CVE-2009-0977, published 2009-04-15. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity,…
CVE-2008-5437, published 2009-01-14. Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Job Queue component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity,…
CVE-2008-5436, published 2009-01-14. Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown…
CVE-2008-3999, published 2009-01-14. Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVE-2008-3974, published 2009-01-14. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.0.2.8 and 9.2.0.8DV allows remote authenticated users to affect availability, related to SYS.OLAPIMPL_T.
CVE-2008-3994, published 2008-10-14. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and…
CVE-2008-3991, published 2008-10-14. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users to affect availability, related to…