Database 10g

Vendor:

First CVE: Apr 16, 2008 · Active for 18 years

37

Total CVEs

More Total CVEs than 97% of tracked products

18.5

Avg CVEs / Year

Higher CVE frequency than 98% of tracked products

5.2

Avg CVSS

Higher Avg CVSS than 9% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Database 10g over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 16, 2008

18 years ago

Most Recent CVE

Apr 15, 2009

6,310 days ago

CVE Severity & Scoring

Database 10g37 CVEs

95%

All CVEs352,708 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown37 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown37 (100.0%)

User Interaction

None0 (0.0%)

Unknown37 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown37 (100.0%)

Top CVEs

Signals from CVEs in this product scope (37 CVEs).

37 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-3984MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	54	NO	YES
CVE-2008-3983MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	54	NO	YES
CVE-2008-3979MEDIUM Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unk	Jan 14, 2009	5.5	48	NO	YES
CVE-2009-0978MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via	Apr 15, 2009	5.5	35	NO	YES
CVE-2009-0991MEDIUM Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unkno	Apr 15, 2009	5.0	29	NO	YES
CVE-2008-3982MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	28	NO	YES
CVE-2008-2595MEDIUM Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOT	Jul 15, 2008	5.0	28	NO	YES
CVE-2008-3996MEDIUM Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and i	Oct 14, 2008	5.5	27	NO	YES
CVE-2008-3995MEDIUM Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and i	Oct 14, 2008	5.5	27	NO	YES
CVE-2008-3989MEDIUM Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability,	Oct 14, 2008	6.5	22	NO	NO

View all 37 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (37 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

7 CVEs

18.9% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

13.5% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (37 CVEs).

Media Mentions

Signals from CVEs in this product scope (37 CVEs).

Top CNAs Publishing CVEs For Database 10g

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
10.2.0.4	15	5.2	4.1%	4
10.2.0.3	13	5.0	8.3%	3
10.2.0.2	3	3.7	11.6%	1
10.1.4.2	2	3.4	5.8%	1
10.1.2.3	2	3.4	5.8%	1
10.1.0.5	27	5.1	6.8%	7