Vulnerability in Oracle Database Server

CVE-2012-3220

Unspecified vulnerability in the Spatial component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users with Create Session privileges to affect confidentiality, integrity, and availability via unknown vectors.

EPSS: 0.020 (78.3th percentile) — read the EPSS interpretation.

Affected products

Oracle Database_server — versions 10.2.0.3, 10.2.0.4, 10.2.0.5
N/a — versions n/a

References

secalert_us@oracle.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
secalert_us@oracle.com (signature, x_refsource_OVAL, vdb-entry)
secalert_us@oracle.com (vendor-advisory, x_refsource_MANDRIVA)