Database 9i

Vendor:

First CVE: Apr 16, 2008 · Active for 18 years

25

Total CVEs

More Total CVEs than 95% of tracked products

12.5

Avg CVEs / Year

Higher CVE frequency than 97% of tracked products

5.6

Avg CVSS

Higher Avg CVSS than 16% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Database 9i over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 16, 2008

18 years ago

Most Recent CVE

Apr 15, 2009

6,309 days ago

CVE Severity & Scoring

Database 9i25 CVEs

80%

16%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown25 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown25 (100.0%)

User Interaction

None0 (0.0%)

Unknown25 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown25 (100.0%)

Top CVEs

Signals from CVEs in this product scope (25 CVEs).

25 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2008-3984MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	54	NO	YES
CVE-2008-3983MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	54	NO	YES
CVE-2009-0991MEDIUM Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unkno	Apr 15, 2009	5.0	29	NO	YES
CVE-2008-1812HIGH Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Databas	Apr 16, 2008	10.0	29	NO	NO
CVE-2008-3982MEDIUM Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect con	Oct 14, 2008	5.5	28	NO	YES
CVE-2008-2595MEDIUM Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOT	Jul 15, 2008	5.0	28	NO	YES
CVE-2009-0979HIGH Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and ava	Apr 15, 2009	9.0	23	NO	NO
CVE-2008-1817HIGH Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to	Apr 16, 2008	9.0	22	NO	NO
CVE-2008-1819HIGH Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09.	Apr 16, 2008	7.2	22	NO	NO
CVE-2008-3976MEDIUM Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality	Oct 14, 2008	5.5	20	NO	NO

View all 25 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (25 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

3 CVEs

12.0% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

16.0% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (25 CVEs).

Media Mentions

Signals from CVEs in this product scope (25 CVEs).

Top CNAs Publishing CVEs For Database 9i

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
9.2.0.8dv	15	5.8	8.0%	4
9.2.0.8	20	5.1	5.5%	4
9.0.4.3	1	5.0	11.3%	1
9.0.2.8	1	4.0	1.4%	0
9.0.1.5	3	6.0	1.4%	0