CVE-2007-2115
Last modified
CVE-2007-2115 is a vulnerability of currently unknown severity. Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar.". EPSS estimates a 3.03% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the "java classes in CDC.jar."
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Database Server | 9.2.0.7 |
| Oracle | Database Server | 10.1.0.5 |
| Oracle | Database Server | 10.2.0.2 |
References
- http://www.us-cert.gov/cas/techalerts/TA07-108A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1426Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA07-108A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/1426Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-2115?
How severe is CVE-2007-2115?
How do I fix CVE-2007-2115?
Are you affected by CVE-2007-2115?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST