CVE-2009-0972: Medium severity oracle database vulnerability

Published Apr 15, 2009

Updated

Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

Affected Software

7 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=9.2.0.8

Oracle Database Server=9.2.0.8dv

Oracle Database Server=10.2.0.3

Oracle Database Server=11.1.0.6

Oracle Database Server=10.1.0.5

Oracle Database Server=11.1.0.7

Event History

Apr 15, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-0972?

CVE-2009-0972 is classified as a medium severity vulnerability affecting Oracle Database.

How do I fix CVE-2009-0972?

To mitigate CVE-2009-0972, it is recommended to apply the latest security patches provided by Oracle for the affected database versions.

Which Oracle Database versions are affected by CVE-2009-0972?

CVE-2009-0972 impacts Oracle Database versions 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.6, and 11.1.0.7.

Can CVE-2009-0972 affect my database's confidentiality?

Yes, CVE-2009-0972 can potentially affect the confidentiality, integrity, and availability of the affected Oracle Database systems.

Who can exploit CVE-2009-0972?

CVE-2009-0972 can be exploited by remote authenticated users, which poses a significant risk to database security.