Vulnerability in Oracle Database Server

CVE-2011-2232

Unspecified vulnerability in the XML Developer Kit component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, and 11.2.0.1, and Oracle Fusion Middleware 10.1.3.5, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.1.0.5, 10.2.0.3, 10.2.0.4
Oracle Fusion_middleware — versions 10.1.3.5
N/a — versions n/a

References

secalert_us@oracle.com (US Government Resource, x_refsource_CERT, third-party-advisory)
secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)