CVE-2008-1820: oracle database_10g

EPSS trend

Probability

2.08%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.08% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

exchange.xforce.ibmcloud.com/vulnerabilities/41858VDB EntryX Refsource XF
www.vupen.com/english/advisories/2008/1267/referencesVDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2008/1233/referencesVDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/491524/30/390/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/42036VDB EntryX Refsource XF
www.securitytracker.com/id?1019855VDB EntryX Refsource SECTRACK
secunia.com/advisories/29829Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/491024/100/0/threadedVendor AdvisoryX Refsource HP
www.oracle.com/technetwork/topics/security/cpuapr2008-082075.htmlX Refsource CONFIRM
secunia.com/advisories/29874Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Related vulnerabilities

CVE-2008-2607oracledatabase_9i+13.36%18y ago15-07-2008 23:00Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure.CVE-2008-2625oracledatabase_10g+12.07%18y ago14-10-2008 21:00Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.CVE-2008-2591oracledatabase_9i+11.37%18y ago15-07-2008 23:00Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.CVE-2008-2624oracledatabase_10g1.17%18y ago14-10-2008 21:00Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.CVE-2008-2587oracledatabase_9i+10.32%18y ago15-07-2008 23:00Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.CVE-2008-2595oracledatabase_10g+111.34%18y ago15-07-2008 23:00Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service (crash) via a malformed LDAP request that triggers a NULL pointer dereference.

All vulnerabilities indatabase_10g database_11g database_9i

CVE-2008-1820: oracle database_10g

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References