Oracle Database vulnerabilities

3 CVEs affecting Oracle Database, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2611, published 2008-07-15.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-2592, published 2008-07-15. Medium severity, CVSS 5.5. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated…
• CVE-2008-2611, published 2008-07-15. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.
• CVE-2008-2600, published 2008-07-15. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to MDSYS.SDO_TOPO_MAP.