CVE-2009-0984 describes an unspecified vulnerability within the Database Vault component of Oracle Database versions 9.2.0.8DV, 10.2.0.4, and 11.1.0.6, specifically related to DBMS_SYS_SQL. This vulnerability allows remote, authenticated attackers to compromise the confidentiality and integrity of the database. With a CVSS score of 5.5, it indicates a medium severity risk where an attacker can exploit it over the network with low attack complexity, requiring authentication, to achieve partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
10.2.0.4CPE matchmatch criteria | cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:* | ||
11.1.0.6CPE matchmatch criteria | cpe:2.3:a:oracle:database_11g:11.1.0.6:*:*:*:*:*:*:* | ||
9.2.0.8dvCPE matchmatch criteria | cpe:2.3:a:oracle:database_9i:9.2.0.8dv:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:P/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.