Information disclosure in Oracle Database Server

CVE-2007-5554

Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Vulnerability class: Information Disclosure

EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References