CVE-2007-3854

Published: Jul 18, 2007Modified: Apr 23, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.

Affected (38)

Products: Oracle: Apex, Application Server, Collaboration Suite, Database Server, E Business Suite, Peoplesoft Enterprise Customer Relationship Management, Peoplesoft Enterprise Human Capital Management, Peoplesoft Enterprise Peopletools, Secure Enterprise Search

9 products

Peoplesoft Enterprise Customer Relationship Management

Peoplesoft Enterprise Human Capital Management

Peoplesoft Enterprise Peopletools

Secure Enterprise Search

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Oracle Apex	Version 1.5.0
Oracle Apex	Version 1.6.1
Oracle Apex	Version 2.0
Oracle Apex	Version 2.2
Oracle Application Server	Version 1.0.2.2 r2
Oracle Application Server	Version 10.1.2.0.1
Oracle Application Server	Version 10.1.2.0.2
Oracle Application Server	Version 10.1.2.1.0
Oracle Application Server	Version 10.1.2.2.0
Oracle Application Server	Version 10.1.3.0.0
Oracle Application Server	Version 10.1.3.1.0
Oracle Application Server	Version 10.1.3.2.0
Oracle Application Server	Version 10.1.3.3.0
Oracle Application Server	Version 9.0.4.3
Oracle Collaboration Suite	Version 10.1.2
Oracle Database Server	Version 10.1.0.5
Oracle Database Server	Version 10.2.0.2 r2
Oracle Database Server	Version 10.2.0.3 r2
Oracle Database Server	Version 9.0.1.5
Oracle Database Server	Version 9.2.0.7 r2
Oracle Database Server	Version 9.2.0.8 r2
Oracle Database Server	Version 9.2.0.8dv r2
Oracle E Business Suite	Version 11.5.10.2
Oracle E Business Suite	Version 11.5.10
Oracle E Business Suite	Version 11.5.8
Oracle E Business Suite	Version 11.5.9
Oracle E Business Suite	Version 12.0.0
Oracle E Business Suite	Version 12.0.1
Oracle Peoplesoft Enterprise Customer Relationship Management	Version 8.9
Oracle Peoplesoft Enterprise Customer Relationship Management	Version 9.0
Oracle Peoplesoft Enterprise Human Capital Management	Version 8.9
Oracle Peoplesoft Enterprise Human Capital Management	Version 9.0
Oracle Peoplesoft Enterprise Peopletools	Version 8.22
Oracle Peoplesoft Enterprise Peopletools	Version 8.47
Oracle Peoplesoft Enterprise Peopletools	Version 8.48
Oracle Peoplesoft Enterprise Peopletools	Version 8.49
Oracle Secure Enterprise Search	Version 10.1.6
Oracle Secure Enterprise Search	Version 10.1.8