CVE-2009-0981

Currently unrated

Key Information:

Vendor
Oracle
Status
Database 11g
Vendor
CVE Published:
15 April 2009

Summary

Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement.

References

http://www.securityfocus.com/bid/34461
vdb-entryx_refsource_BID
http://secunia.com/advisories/34693
third-party-advisoryx_refsource_SECUNIA
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
third-party-advisoryx_refsource_CERT

EPSS Score

24% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.