Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Oracle10g
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1366 1 Oracle 9 Application Server, Collaboration Suite, E-business Suite and 6 more 2023-12-10 4.6 MEDIUM N/A
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
CVE-2004-1774 1 Oracle 2 Application Server, Oracle10g 2023-12-10 7.2 HIGH N/A
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
CVE-2004-1364 1 Oracle 9 Application Server, Collaboration Suite, E-business Suite and 6 more 2023-12-10 8.5 HIGH N/A
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.