Vulnerabilities > Oracle > Database Server

DATE CVE VULNERABILITY TITLE RISK
2012-05-03 CVE-2012-0526 Remote HTTP Response Splitting vulnerability in Oracle Database Server
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5, allows remote attackers to affect integrity via unknown vectors related to Schema Management, a different vulnerability than CVE-2012-0527.
network
oracle
4.3
2012-05-03 CVE-2012-0525 SQL Injection vulnerability in Oracle Enterprise Manager
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7, 11.2.0.2, and 11.2.0.3, and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.
network
oracle
4.9
2012-05-03 CVE-2012-0520 Remote Enterprise Manager Base Platform vulnerability in Oracle Database Server
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2, and in Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1, allows remote attackers to affect integrity via unknown vectors related to Security Framework.
network
oracle
4.3
2012-05-03 CVE-2012-0519 Remote Core RDBMS vulnerability in Oracle Database Server 11.2.0.2
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.2.0.2, when running on Windows, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
network
high complexity
oracle microsoft
7.1
2012-05-03 CVE-2012-0512 SQL Injection vulnerability in Oracle Database Server 11.1.0.7/11.2.0.2
Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Database Server 11.1.0.7 and 11.2.0.2 and Oracle Enterprise Manager Grid Control allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Config Management.
network
low complexity
oracle
5.5
2012-05-03 CVE-2012-0511 Unspecified vulnerability in Oracle Database Server 10.2.0.4/11.1.0.7
Unspecified vulnerability in the OCI component in Oracle Database Server 10.2.0.3, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality and integrity via unknown vectors.
network
low complexity
oracle
6.4
2012-05-03 CVE-2012-0510 Security Bypass vulnerability in Oracle Database Server OCIPasswordChange API
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, and 11.1.0.7 allows remote attackers to affect integrity and availability via unknown vectors.
network
low complexity
oracle
6.4
2012-01-18 CVE-2012-0082 Core RDBMS Remote vulnerability in Oracle Database Server
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity and availability via unknown vectors.
network
low complexity
oracle
5.5
2012-01-18 CVE-2012-0072 Listener Remote vulnerability in Oracle Database Server
Unspecified vulnerability in the Listener component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote attackers to affect availability via unknown vectors.
network
low complexity
oracle
5.0
2011-10-18 CVE-2011-3525 Remote Application Express vulnerability in Oracle Database
Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.
network
low complexity
oracle
6.5