Database Server

database_server

Vendor: Oracle • 531 CVEs

CVEs (531)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-1994 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.
CVE-2009-1993 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.
CVE-2009-1992 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2009-1991 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 3.6 LOW· v2 Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC....Show more Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.Show less
CVE-2009-1985 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown v...Show more Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.Show less
CVE-2009-1979 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the pr...Show more Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.Show less
CVE-2009-1972 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.
CVE-2009-1971 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 3.5 LOW· v2 Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2009-1965 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2009-1964 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
CVE-2009-1018 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC).
CVE-2009-1007 1Oracle 1Database Server Apr 23, 2026 Oct 22, 2009 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Unspecified vulnerability in the Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYS.DMP_SYS.
CVE-2009-1973 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies.
CVE-2009-1970 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability th...Show more Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.Show less
CVE-2009-1969 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2009-1968 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July...Show more Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search.Show less
CVE-2009-1967 1Oracle 2Database Server Enterprise Manager Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknow...Show more Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.Show less
CVE-2009-1966 1Oracle 2Database Server Enterprise Manager Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknow...Show more Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967.Show less
CVE-2009-1963 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.
CVE-2009-1021 1Oracle 1Database Server Apr 23, 2026 Jul 14, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Previous 1...161718...27 Next