Oracle

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-1001 1Oracle 1Bea Product Suite Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors.
CVE-2009-1000 1Oracle 1E Business Suite Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and attack vectors.
CVE-2009-0999 1Oracle 1E Business Suite Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2009-0998 1Oracle 2Jd Edwards Enterpriseone Peoplesoft Enterprise Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality...Show more Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.Show less
CVE-2009-0997 1Oracle 1Database Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the Database Vault component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality, related to DBMS_SYS_SQL.
CVE-2009-0996 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2009-0995 1Oracle 2E Business Suite E Business Suite 12 Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors.
CVE-2009-0994 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a differen...Show more Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-1017.Show less
CVE-2009-0993 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information wa...Show more Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a format string vulnerability that allows remote attackers to execute arbitrary code via format string specifiers in an HTTP POST URI, which are not properly handled when logging to opmn/logs/opmn.log.Show less
CVE-2009-0992 1Oracle 2Database 10g Database 11g Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the p...Show more Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.Show less
CVE-2009-0991 1Oracle 3Database 10g Database 11gDatabase 9i Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability th...Show more Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970.Show less
CVE-2009-0990 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a diff...Show more Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0989.Show less
CVE-2009-0989 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a diff...Show more Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0990.Show less
CVE-2009-0988 1Oracle 1Database 11g Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 2.1 LOW· v2 Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2009-0986 1Oracle 2Database 10g Database 11g Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2009-0985 1Oracle 2Database 10g Database 11g Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 7.1 HIGH· v2 Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availa...Show more Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.Show less
CVE-2009-0984 1Oracle 3Database 10g Database 11gDatabase 9i Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 5.5 MEDIUM· v2 Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL.
CVE-2009-0983 1Oracle 1Application Server Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2...Show more Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407.Show less
CVE-2009-0982 1Oracle 2Jd Edwards Enterpriseone Peoplesoft Enterprise Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authenticated users to affect integrity via unknown vectors.
CVE-2009-0981 1Oracle 1Database 11g Apr 23, 2026 Apr 15, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from t...Show more Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement.Show less

Previous 1...487488489...525 Next