Vulnerability in Oracle Database Server

CVE-2011-2231

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.1, Oracle Fusion Middleware 10.1.3.5, allows remote attackers to affect availability via unknown vectors.

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.1.0.5, 10.2.0.3, 10.2.0.4
Oracle Fusion_middleware — versions 10.1.3.5
N/a — versions n/a

References

secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)