{"id":"CVE-2012-0534","aliases":["EUVD-2012-0566","GHSA-c246-wmxr-fvcv","SUSE-SU-2015:0498-1"],"status":"published","title":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0...","description":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01092,"percentile":0.65641,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2012-05-03T17:18:00Z","modified":"2026-06-16T23:37:29Z","products":[{"vendor":"oracle","product":"database_server"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1026929","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0534"},{"url":"https://github.com/advisories/GHSA-c246-wmxr-fvcv"},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150498-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/757762","tags":["report"]},{"url":"https://bugzilla.suse.com/771994","tags":["report"]},{"url":"https://bugzilla.suse.com/776005","tags":["report"]},{"url":"https://bugzilla.suse.com/781730","tags":["report"]},{"url":"https://bugzilla.suse.com/799056","tags":["report"]},{"url":"https://bugzilla.suse.com/816221","tags":["report"]},{"url":"https://bugzilla.suse.com/818773","tags":["report"]},{"url":"https://bugzilla.suse.com/836732","tags":["report"]},{"url":"https://bugzilla.suse.com/859033","tags":["report"]},{"url":"https://bugzilla.suse.com/873982","tags":["report"]},{"url":"https://bugzilla.suse.com/887569","tags":["report"]},{"url":"https://bugzilla.suse.com/914702","tags":["report"]},{"url":"https://bugzilla.suse.com/927281","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0526","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0527","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4245","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0483","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-0534","description":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.","status":"published","published":"2012-05-03T17:18:00Z","modified":"2024-08-06T18:30:52.897Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0566","description":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.","status":"published","published":"2012-05-03T17:18:00Z","modified":"2024-08-06T18:30:52Z","updated_at":"2026-11-03T01:56:21.302523Z"}],"ghsa":[{"id":"GHSA-c246-wmxr-fvcv","title":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0...","description":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.","status":"published","published":"2022-05-04T00:31:04Z","modified":"2023-02-01T05:01:46Z","updated_at":"2026-11-02T14:49:46.769772Z"}],"nvd":[{"id":"CVE-2012-0534","description":"Unspecified vulnerability in the RDBMS Core component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Create Session.","status":"published","published":"2012-05-03T17:55:02.327Z","modified":"2026-06-16T23:37:29.513Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:13.901526Z"}],"osv":[{"id":"SUSE-SU-2015:0498-1","title":"Security update for oracle-update","description":"\nThis critical patch update contains 5 security fixes for the Oracle \nDatabase Server. One of the vulnerabilities could have been exploited over \nthe network without a valid username and password.\n\nSecurity Issues:\n\n    * CVE-2013-3751\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3751\u003e\n    * CVE-2013-3774\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3774\u003e\n    * CVE-2014-4236\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4236\u003e\n    * CVE-2014-4237\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4237\u003e\n    * CVE-2014-4245\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4245\u003e\n\n","status":"published","published":"2014-07-18T09:38:45Z","modified":"2026-02-04T02:42:26.061761Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}