CVE-2009-1997: Medium severity Oracle Database Server vulnerability
Published Oct 22, 2009
·Updated
Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.
Affected Software
2 affected components
Oracle Database Server=10.2.0.3
Oracle Database Server=11.1.0.7
Event History
Oct 22, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1997?
CVE-2009-1997 is considered a high severity vulnerability due to its potential impact on the confidentiality of data.
2
How do I fix CVE-2009-1997?
To fix CVE-2009-1997, you should apply the latest security patches provided by Oracle for the affected database versions.
3
What versions of Oracle Database are affected by CVE-2009-1997?
CVE-2009-1997 affects Oracle Database versions 10.2.0.3 and 11.1.0.7.
4
Can CVE-2009-1997 be exploited remotely?
Yes, CVE-2009-1997 can be exploited by remote attackers, making it critical to secure the database.
5
What components of the Oracle Database are impacted by CVE-2009-1997?
CVE-2009-1997 impacts the Authentication component of the Oracle Database.