CVE-2009-0992 : Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows r

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.

Published 2009-04-15 10:30:01

Updated 2018-10-10 19:32:42

Source Oracle

View at NVD, CVE.org

Vulnerability category: Sql Injection

Exploit prediction scoring system (EPSS) score for CVE-2009-0992

EPSS FAQ

8.50%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 95 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-0992

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:N	8.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

Products affected by CVE-2009-0992

Oracle » Database 10g » Version: 10.1.0.5
cpe:2.3:a:oracle:database_10g:10.1.0.5:*:*:*:*:*:*:*
Matching versions
Oracle » Database 10g » Version: 10.2.0.4
cpe:2.3:a:oracle:database_10g:10.2.0.4:*:*:*:*:*:*:*
Matching versions
Oracle » Database 11g » Version: 11.1.0.7
cpe:2.3:a:oracle:database_11g:11.1.0.7:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2009-0992

Exploit prediction scoring system (EPSS) score for CVE-2009-0992

CVSS scores for CVE-2009-0992

References for CVE-2009-0992

Products affected by CVE-2009-0992