CVE-2015-0393

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3, and 12.2.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to DB Privileges. NOTE: the previous information is from the January 2015 CPU. Oracle has not commented on the researcher's claim that the PUBLIC role is granted the INDEX privilege for the DUAL table during a "seeded install," which allows remote authenticated users to gain SYSDBA privileges and execute arbitrary code.

• http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdfVendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/72230
• http://www.securitytracker.com/id/1031579
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100097
• http://www.databaseforensics.com/Oracle_Jan2015_CPU.pdfVendor Advisory
• http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/72230
• http://www.securitytracker.com/id/1031579
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100097

Published

Jan 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0387Unspecified vulnerability in the Siebel Core - Server OM Ser…
• CVE-2015-0388Unspecified vulnerability in the Siebel UI Framework compone…
• CVE-2015-0389Unspecified vulnerability in the Oracle OpenSSO component in…
• CVE-2015-0390Unspecified vulnerability in the MICROS Retail component in …
• CVE-2015-0391Unspecified vulnerability in Oracle MySQL Server 5.5.38 and …
• CVE-2015-0392Unspecified vulnerability in the Siebel Core - Server BizLog…
• CVE-2015-0394Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2015-0395Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u…
• CVE-2015-0396Unspecified vulnerability in the Oracle GlassFish Server com…
• CVE-2015-0397Unspecified vulnerability in Oracle Sun Solaris 11 allows lo…
• CVE-2015-0398Unspecified vulnerability in the Siebel Life Sciences compon…
• CVE-2015-0399Unspecified vulnerability in the Oracle Business Intelligenc…