Vulnerability in Oracle Database Server

CVE-2010-0860

Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege.

EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.1.0.5, 9.2.0.8, 11.1.0.7
N/a — versions n/a

References

secalert_us@oracle.com (x_refsource_SECUNIA, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)