Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:oracle9i:9.0.1.4:*:*:*:*:*:*:*
part: a version: 9.0.1.4 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Oracle9I (db3762a3-5783-559e-978c-b012f8e72891) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-1495 |
vulnerable | 2026-06-08 04:48:26.784858 |
Details available
Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape detection.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1339 |
vulnerable | 2026-06-08 04:47:53.679711 |
Details available
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1338 |
vulnerable | 2026-06-08 04:47:53.674307 |
Details available
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
Published: 2005-01-06T05:00:00.000Z
Updated: 2024-08-08T00:46:12.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0222 |
vulnerable | 2026-06-08 04:47:21.074276 |
Details available
Stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a "CREATE DATABASE LINK" query containing a connect string with a long USING parameter.
Published: 2003-04-30T04:00:00.000Z
Updated: 2024-08-08T01:43:36.042Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.