CVE-2015-0370

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...

3.5 Low

CVE-2015-0370 is a low vulnerability (CVSS 3.5) in Oracle Database Server, published July 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. No source names a fixed version.

What does this mean?

Severity: 3.5 LowCVSS 2.0, NVD
Exploit chance: 1.21%EPSS, 68th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2013-5858.

Exploit likelihood

1.21%Up 0.1 points since Feb 4, 2022

Affected products

oracle database server

What each source reports

NVD Score used3.5

Record: CVE-2015-0370
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2015-0370
Updated: 2026-11-02

EUVDEUVD-2015-0383No score

Record: EUVD-2015-0383
Updated: 2026-11-03

GitHub AdvisoriesGHSA-crhp-h4x5-h8ggNo score

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0...

Record: GHSA-crhp-h4x5-h8gg
Updated: 2026-11-02

OSVSUSE-SU-2015:0498-1No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0498-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0498-2No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0498-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0907-1No score

Security update for oracle-update

This critical patch update contains 5 security fixes for the Oracle Database Server. One of the vulnerabilities could have been exploited over the network without a valid username and password.

Security Issues:

* CVE-2013-3751
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751>
* CVE-2013-3774
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774>
* CVE-2014-4236
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236>
* CVE-2014-4237
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237>
* CVE-2014-4245
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245>

Record: SUSE-SU-2015:0907-1
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 50 moreShow less