CVE-2007-2115: SQL Injection

Published Apr 18, 2007

Updated

Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMSCDCPUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."

Affected Software

3 affected components

Oracle Database Server=10.2.0.2

Oracle Database Server=9.2.0.7

Oracle Database Server=10.1.0.5

Event History

Apr 18, 2007

CVE Published

06:19 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the impact of CVE-2007-2115?

CVE-2007-2115 may involve multiple SQL injection vulnerabilities in the Oracle Database, leading to unknown impacts.

Which versions of Oracle Database are affected by CVE-2007-2115?

CVE-2007-2115 affects Oracle Database versions 9.2.0.7, 10.1.0.5, and 10.2.0.2.

How can I mitigate CVE-2007-2115?

To mitigate CVE-2007-2115, it is recommended to apply the latest security patches provided by Oracle.

Is CVE-2007-2115 considered a serious security issue?

Yes, CVE-2007-2115 is considered a serious security issue due to its nature of potentially allowing SQL injection attacks.

Has Oracle acknowledged CVE-2007-2115?

Yes, as of April 2007, Oracle has not disputed reliable claims regarding the vulnerabilities associated with CVE-2007-2115.