Deskripsi CVE

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB07 is SQL injection.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE Other	Tidak ada informasi.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	9		AV:N/AC:L/Au:S/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Oracle>>Database_9i >> Version 9.2.0.8dv

Oracle>>Database_server >> Version 9.0.1.5

Oracle>>Database_server >> Version 10.1.0.5

Oracle>>Database_server >> Version 10.2.0.3

Oracle>>Database_server >> Version 11.1.0.6

Referensi

https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2008/1267/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.vupen.com/english/advisories/2008/1233/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.red-database-security.com/advisory/oracle_sql_injection_sdo_idx.html
Tags : x_refsource_MISC

http://www.securitytracker.com/id?1019855
Tags : vdb-entry, x_refsource_SECTRACK

https://exchange.xforce.ibmcloud.com/vulnerabilities/42001
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/29829
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/491024/100/0/threaded
Tags : vendor-advisory, x_refsource_HP

http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/29874
Tags : third-party-advisory, x_refsource_SECUNIA