Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Oracle10g
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1496 1 Oracle 2 Application Server, Oracle10g 2025-04-03 4.6 MEDIUM N/A
The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.
CVE-2006-0272 1 Oracle 2 Oracle10g, Oracle9i 2025-04-03 9.0 HIGH N/A
Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.
CVE-2004-1364 1 Oracle 9 Application Server, Collaboration Suite, E-business Suite and 6 more 2025-04-03 8.5 HIGH N/A
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.