CVE-2008-3989 is an unspecified vulnerability within the Oracle Data Mining component of Oracle Database 10.2.0.3, specifically affecting DMSYS.ODM_MODEL_UTIL. This vulnerability carries a CVSS score of 6.5, indicating a medium severity, and allows remote authenticated attackers to impact the confidentiality, integrity, and availability of the system with low attack complexity. Despite its age, there is no known public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed on the CISA KEV catalog. However, it has garnered significant community discussion with 12 mentions, suggesting ongoing awareness or research interest.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.2.0.3CPE matchmatch criteria | cpe:2.3:a:oracle:database_10g:10.2.0.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.