CVE-2008-3984

2008-10-1421:11:11

[email protected]

web.nvd.nist.gov

cve-2008-3984

oracle database

workspace manager

vulnerability

confidentiality

integrity

remote authenticated users

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

5.4 Medium

AI Score

Confidence

Low

0.958 High

EPSS

Percentile

99.5%

JSON

Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.

Affected configurations

NVD

Node

oracledatabase_10gMatch10.1.0.5

oracledatabase_10gMatch10.2.0.3

oracledatabase_11iMatch11.1.0.6

oracledatabase_9iMatch9.2.0.8

oracledatabase_9iMatch9.2.0.8dv

CPENameOperatorVersion
oracle:database_10goracle database 10geq10.1.0.5
oracle:database_10goracle database 10geq10.2.0.3
oracle:database_11ioracle database 11ieq11.1.0.6
oracle:database_9ioracle database 9ieq9.2.0.8
oracle:database_9ioracle database 9ieq9.2.0.8dv

CPE	Name	Operator	Version
oracle:database_10g	oracle database 10g	eq	10.1.0.5
oracle:database_10g	oracle database 10g	eq	10.2.0.3
oracle:database_11i	oracle database 11i	eq	11.1.0.6
oracle:database_9i	oracle database 9i	eq	9.2.0.8
oracle:database_9i	oracle database 9i	eq	9.2.0.8dv