CVE-2007-2115
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7,...
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
- Record
CVE-2007-2115- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
- Record
CVE-2007-2115- Updated
- 2026-11-02
EUVDEUVD-2007-2110 No score
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
- Record
EUVD-2007-2110- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w8qx-8wv5-cfpj No score
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7,...
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
- Record
GHSA-w8qx-8wv5-cfpj- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2115 is a medium vulnerability (CVSS 6.8) in Oracle Database Server, published April 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.03%, the 87th percentile. No source names a fixed version.
References
us-cert.gov/cas/techalerts/TA07-108A.html
databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
oracle.com/technetwork/topics/security/cpuapr2007-090632.html
securityfocus.com/bid/23532
securitytracker.com/id?1017927
Show 6 moreShow less
red-database-security.com/advisory/oracle_cpu_apr_2007.html
ngssoftware.com/research/papers/NGSSoftware-OracleCPUAPR2007.pdf
vupen.com/english/advisories/2007/1426
integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf
nvd.nist.gov/vuln/detail/CVE-2007-2115
github.com/advisories/GHSA-w8qx-8wv5-cfpj