CVE-2009-1968: XSS

Published Jul 14, 2009

Updated

Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the searchpgroups parameter in search/query/search.

Affected Software

1 affected component

Oracle Database Server=10.1.8.3

Remediation

Patch Available

http://www.vupen.com/english/advisories/2009/1900

Event History

Jul 14, 2009

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1968?

The severity of CVE-2009-1968 is currently unspecified as Oracle has not provided detailed information on this vulnerability.

How do I fix CVE-2009-1968?

To address CVE-2009-1968, it is recommended to apply any available patches or updates from Oracle for the affected version of Oracle Database 10.1.8.3.

What systems are affected by CVE-2009-1968?

CVE-2009-1968 specifically affects Oracle Database version 10.1.8.3.

What types of attacks can exploit CVE-2009-1968?

CVE-2009-1968 may allow remote attackers to affect integrity, although the exact conditions for exploitation are unknown.

When was CVE-2009-1968 disclosed?

CVE-2009-1968 was disclosed in July 2009 as part of Oracle's Critical Patch Update.