CVE-2007-2115

Description

Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors, aka DB09. NOTE: as of 20070424, oracle has not disputed reliable claims that this issue involves multiple SQL injection vulnerabilities in the DBMS_CDC_PUBLISH with remote authenticated vectors involving the java classes in CDC.jar.

Risk Information

Base Score

9.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

4.62

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Oracle 10.1.0.5	Windows
Multiple Vulnerabilities are affected in Oracle 10.2.0.2	Windows
Multiple Vulnerabilities are affected in Oracle Database Server 9.2.0.7	Windows
Multiple Vulnerabilities are affected in Oracle Database Server 10.1.0.5	Windows
Multiple Vulnerabilities are affected in Oracle Database Server 10.2.0.2	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234