CVE-2008-1815: oracle database_10g

EPSS trend

Probability

1.26%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

0.00 pp

From 1.26% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

exchange.xforce.ibmcloud.com/vulnerabilities/41998VDB EntryX Refsource XF
exchange.xforce.ibmcloud.com/vulnerabilities/41858VDB EntryX Refsource XF
www.vupen.com/english/advisories/2008/1267/referencesVDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2008/1233/referencesVDB EntryX Refsource VUPENVendor Advisory
www.securitytracker.com/id?1019855VDB EntryX Refsource SECTRACK
secunia.com/advisories/29829Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/491024/100/0/threadedVendor AdvisoryX Refsource HP
www.oracle.com/technetwork/topics/security/cpuapr2008-082075.htmlX Refsource CONFIRM
www.securityfocus.com/archive/1/491522/30/390/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/29874Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2008-2625oracledatabase_10g+12.07%18y ago14-10-2008 21:00Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.CVE-2008-2624oracledatabase_10g1.17%18y ago14-10-2008 21:00Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.CVE-2008-2595oracledatabase_10g+111.34%18y ago15-07-2008 23:00Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.CVE-2008-1820oracledatabase_10g+22.08%18y ago16-04-2008 10:00Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.CVE-2008-4015oracledatabase_10g1.72%17y ago14-01-2009 01:00Unspecified vulnerability in the Oracle Streams component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_STREAMS_AUTH.CVE-2008-5436oracledatabase_10g+11.98%17y ago14-01-2009 01:00Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect integrity and availability via unknown vectors.

All vulnerabilities indatabase_10g database_11g

CVE-2008-1815: oracle database_10g

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References