CVE-2011-2239: High severity oracle database vulnerability

Published Jul 20, 2011

Updated

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability, related to XMLSEQIMPT.

Affected Software

6 affected components

Oracle Database Server=10.2.0.4

Oracle Database Server=10.2.0.3

Oracle Database Server=11.2.0.1

Oracle Database Server=11.2.0.2

Oracle Database Server=10.2.0.5

Oracle Database Server=11.1.0.7

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html

Event History

Jul 20, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2239?

CVE-2011-2239 has severe implications for confidentiality, integrity, and availability in affected Oracle Database versions.

How do I fix CVE-2011-2239?

To fix CVE-2011-2239, you should apply the latest security patches provided by Oracle for the affected database versions.

Which versions of Oracle Database are affected by CVE-2011-2239?

CVE-2011-2239 affects Oracle Database versions 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2.

Who can exploit CVE-2011-2239?

CVE-2011-2239 can be exploited by remote authenticated users, making it critical to ensure proper user access controls.

What component is vulnerable in CVE-2011-2239?

CVE-2011-2239 is an unspecified vulnerability in the Core RDBMS component of the Oracle Database Server.