CVE-2015-0455

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3,...

6.8 Medium

CVE-2015-0455 is a medium vulnerability (CVSS 6.8) in Oracle Database Server, published July 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.

What does this mean?

Severity: 6.8 MediumCVSS 2.0, NVD
Exploit chance: 1.72%EPSS, 77th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors.

Exploit likelihood

1.72%Up 0.7 points since Feb 4, 2022

Affected products

oracle database server

What each source reports

NVD Score used6.8

Record: CVE-2015-0455
CVSS 2.0: 6.8 MediumAV:N/AC:L/Au:S/C:C/I:N/A:N
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2015-0455
Updated: 2026-11-02

EUVDEUVD-2015-0468No score

Record: EUVD-2015-0468
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6qp9-77cv-mjx6No score

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3,...

Record: GHSA-6qp9-77cv-mjx6
Updated: 2026-11-02

OSVSUSE-SU-2015:0498-1No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0498-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0498-2No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0498-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0907-1No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0907-1
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 48 moreShow less