Oracle » Secure Backup : Security Vulnerabilities, CVEs, Published In 2009
CVE-2009-1978
Public exploit
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php.
Max CVSS
9.0
EPSS Score
82.19%
Published
2009-07-14
Updated
2017-08-17
CVE-2009-1977
Public exploit
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php.
Max CVSS
10.0
EPSS Score
85.46%
Published
2009-07-14
Updated
2017-08-17
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5448.
Max CVSS
10.0
EPSS Score
67.72%
Published
2009-01-14
Updated
2016-11-22
CVE-2008-5448
Public exploit
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5444 and CVE-2008-5449.
Max CVSS
10.0
EPSS Score
97.48%
Published
2009-01-14
Updated
2016-11-22
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed private Protocol data that triggers a NULL pointer dereference.
Max CVSS
5.0
EPSS Score
0.92%
Published
2009-01-14
Updated
2018-10-11
CVE-2008-5444
Public exploit
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2008-5448 and CVE-2008-5449.
Max CVSS
10.0
EPSS Score
92.41%
Published
2009-01-14
Updated
2016-11-22
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5442.
Max CVSS
5.0
EPSS Score
67.72%
Published
2009-01-14
Updated
2016-11-22
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-2008-5443.
Max CVSS
5.0
EPSS Score
67.72%
Published
2009-01-14
Updated
2016-11-22
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5442 and CVE-2008-5443.
Max CVSS
5.0
EPSS Score
67.72%
Published
2009-01-14
Updated
2016-11-22
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Max CVSS
10.0
EPSS Score
2.60%
Published
2009-01-14
Updated
2012-10-23
Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.1.0.1 allows remote attackers to affect confidentiality via unknown vectors.
Max CVSS
5.0
EPSS Score
0.45%
Published
2009-01-14
Updated
2013-01-03
11 vulnerabilities found