Vulnerability in Oracle Database 10g
CVE-2008-3984
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.5 (Medium). Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.418 (98.6th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 99th percentile — 98.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.418 · newest: 0.418 · change: 0.000
Affected products
- Oracle Database 10g — versions 10.1.0.5, 10.2.0.3
- Oracle Database 11i — versions 11.1.0.6
- Oracle Database 9i — versions 9.2.0.8, 9.2.0.8dv
Public proof-of-concept exploits
References
- exchange.xforce.ibmcloud.com/vulnerabilities/45887 (vdb-entry)
- www.oracle.com/technetwork/topics/security/cpuoct2008-100299.html (Vendor Advisory)
- secunia.com/advisories/32291 (Permissions Required, third-party-advisory)
- www.securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry)
- www.vupen.com/english/advisories/2008/2825 (vdb-entry, Not Applicable)
Frequently asked questions
- What is CVE-2008-3984?
- CVE-2008-3984 is a vulnerability in Oracle Database 10g. Published 2008-10-14.
- Is CVE-2008-3984 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.