Oracle Database Server Lite vulnerabilities

3 CVEs affecting Oracle Database Server Lite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-3641, published 2005-11-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-3641, published 2005-11-16. High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days. Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.
CVE-2004-1707, published 2004-07-30. High severity, CVSS 7.2. EPSS: 2.6% chance of exploitation in the next 30 days. The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges,…
CVE-2004-2229, published 2004-12-31. Medium severity, CVSS 4.6. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated users to gain privileges.