Skip to content

Oracle Database Server vulnerabilities

oracle database serveriSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to...CVE-2005-3206Public exploitEPSS 21.5%5.0 MediumOctober 14, 2005
oracle database serverCross-site scripting (XSS) vulnerability in iSQL*Plus (iSQLPlus) in Oracle9i Database Server...CVE-2005-32053.5 LowOctober 14, 2005
oracle database serverSQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in...CVE-2005-11977.5 HighApril 21, 2005
oracle database serverDirectory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to...CVE-2005-0701Public exploitEPSS 18.1%5.0 MediumMarch 7, 2005
oracle database serverThe DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific...CVE-2005-02985.0 MediumFebruary 10, 2005
oracle database serverSQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute...CVE-2005-02977.5 HighJanuary 18, 2005
oracle database serverUnknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0...CVE-2004-23456.5 MediumDecember 31, 2004
oracle database server liteMultiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0...CVE-2004-22294.6 MediumDecember 31, 2004
oracle database server, oracle9i +1 moreSQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS...CVE-2004-13396.5 MediumDecember 23, 2004
oracle database server, oracle9i +1 moreThe triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of...CVE-2004-13386.5 MediumDecember 23, 2004
oracle application server, collaboration suite, database server +7 more +9 moreStack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary...CVE-2004-1371EPSS 10.8%9.0 HighAugust 4, 2004
oracle application server, collaboration suite, database server +4 more +6 moreBuffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via...CVE-2004-13639.8 CriticalAugust 4, 2004
oracle application server, application server portal, database server lite +2 more +4 moreThe (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix...CVE-2004-1707Public exploit7.2 HighJuly 30, 2004
oracle database serverMultiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release...CVE-2003-0727Public exploitEPSS 68.4%2.1 LowSeptember 3, 2003
oracle database server, oracle8i, oracle9i +2 moreStack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and...CVE-2003-0222EPSS 11.0%9.0 HighApril 30, 2003
oracle database server, oracle8i, oracle9i +2 moreBuffer overflow in ORACLE.EXE for Oracle Database Server 9i, 8i, 8.1.7, and 8.0.6 allows remote...CVE-2003-0095EPSS 13.1%10.0 HighMarch 3, 2003
oracle database server, oracle8i, oracle9i +2 moreMultiple buffer overflows in Oracle 9i Database release 2, Release 1, 8i, 8.1.7, and 8.0.6 allow...CVE-2003-0096EPSS 15.9%9.0 HighFebruary 21, 2003
oracle database serverBuffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to...CVE-2002-1767Public exploit7.2 HighDecember 31, 2002
apache http server, oracle application server, database server +2 more +4 moreCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 MediumOctober 11, 2002
apache http server, oracle application server, database server +1 more +3 moreBuffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and...CVE-2002-0843EPSS 21.4%7.5 HighOctober 5, 2002
oracle oracle9i, database server +1 moreSQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial...CVE-2002-08565.0 MediumSeptember 5, 2002
oracle database server, oracle8i +1 moreFormat string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0...CVE-2002-0857EPSS 13.8%7.5 HighAugust 20, 2002
oracle database server, oracle8i, oracle9i +2 moreOracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to...CVE-2002-05677.5 HighJuly 3, 2002
oracle database serverBuffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary...CVE-2001-0833Public exploit7.2 HighDecember 6, 2001
oracle database serverBuffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary...CVE-2001-0941Public exploit4.6 MediumNovember 30, 2001
oracle database serverdbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute...CVE-2001-09424.6 MediumNovember 29, 2001
oracle database serverVulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary...CVE-2001-08322.1 LowNovember 22, 2001
oracle database serverUnknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit...CVE-2001-08314.6 MediumNovember 22, 2001
oracle database serveroracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files...CVE-2001-10412.1 LowAugust 31, 2001
oracle database serverdbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable...CVE-2001-09437.2 HighAugust 31, 2001
oracle database server, oracle8i +1 moreOracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a...CVE-2001-05155.0 MediumJuly 21, 2001
oracle database serverDenial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port,...CVE-1999-07845.0 MediumFebruary 14, 2001
oracle database server, oracle8i +1 moredbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the...CVE-1999-0888Public exploit4.6 MediumAugust 16, 1999