Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*

part: a version: 9.2.0.4 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductDatabase Server (c4b75d6a-b6aa-58b6-9301-ee10807a2834)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5897 vulnerable 2026-06-08 04:50:07.215670 Details available
Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via the TRANSFORM function. NOTE: this issue might already be covered by CVE-2007-5515, CVE-2007-5509, or CVE-2007-5505, but there are insufficient details to be sure.
Published: 2007-11-08T21:00:00.000Z
Updated: 2024-08-07T15:47:00.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0298 vulnerable 2026-06-08 04:48:12.207109 Details available
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
Published: 2005-02-10T05:00:00.000Z
Updated: 2024-08-07T21:05:25.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2345 vulnerable 2026-06-08 04:48:09.352642 Details available
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
Published: 2005-08-16T04:00:00.000Z
Updated: 2024-08-08T01:22:14.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1363 vulnerable 2026-06-08 04:47:53.783134 Details available
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:46:12.458Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.