Vulnerability in Oracle Database Server

CVE-2010-2389

Unspecified vulnerability in the Perl component in Oracle Database Server 11.2.0.1, 11.1.0.7, 10.2.0.3, 10.2.0.4, and 10.1.0.5; and Fusion Middleware 11.1.1.1.0 and 11.1.1.2.0; allows local users to affect integrity via unknown vectors related to Local Logon.

EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.2.0.3, 10.1.0.5, 11.1.0.7
Oracle Fusion_middleware — versions 11.1.1.1.0, 11.1.1.2.0
N/a — versions n/a

References

secalert_us@oracle.com (x_refsource_CONFIRM)
secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)