CVEvulnerability

CVE-2007-3853

6.5 MEDIUM Published 2007-07-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-07-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM component (DB01), (2) Oracle Text component (DB09), and (3) MDSYS.SDO_GEOR_INT in the Spatial component (DB15). NOTE: a reliable researcher claims that DB01 is SQL injection in DBMS_PRVTAQIS.

Affected configurations

• oracle database server 10.1.0.5 • oracle database server 10.2.0.3

References