PT-2010-1290 · Oracle · Oracle+1

Published 2010-01-12 · Updated 2016-11-23 · CVE-2009-3414

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle (affected versions not specified)

Description The issue allows remote attackers to bypass security restrictions, execute arbitrary SQL commands, and gain access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-3414

Affected Products

Oracle

Oracle Database

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2009-3414 · Security Note
• http://oracle.com/technetwork/topics/security/cpujan2010-084891.html · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA10-012A.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3414 · Note