CVE-2008-2595: oracle database_10g

EPSS trend

Probability

11.34%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.34% on 20-09-2026

20-09-202620-10-2026

EPSS score

11.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
Oracle Internet Directory 10.1.4 - Remote Denial of Service
Maturity: poc

References

9 links

www.oracle.com/technetwork/topics/security/cpujul2008-090335.htmlX Refsource CONFIRM
www.vupen.com/english/advisories/2008/2115VDB EntryX Refsource VUPEN
www.securitytracker.com/id?1020494VDB EntryX Refsource SECTRACK
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143Vendor AdvisoryX Refsource HP
www.vupen.com/english/advisories/2008/2109/referencesVDB EntryX Refsource VUPEN
www.exploit-db.com/exploits/6101ExploitX Refsource EXPLOIT DB
labs.idefense.com/intelligence/vulnerabilities/display.php?id=725Third Party AdvisoryX Refsource IDEFENSE
secunia.com/advisories/31087Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/31113Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2008-2607oracledatabase_9i+13.36%18y ago15-07-2008 23:00Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure.CVE-2008-2625oracledatabase_10g+12.07%18y ago14-10-2008 21:00Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the Oracle October 2008 CPU. Oracle has not commented on reliable researcher claims that this issue involves an authentication bypass by establishing a TNS connection and impersonating a user session via a crafted authentication message during proxy authentication mode.CVE-2008-2591oracledatabase_9i+11.37%18y ago15-07-2008 23:00Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.CVE-2008-2624oracledatabase_10g1.17%18y ago14-10-2008 21:00Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.CVE-2008-2587oracledatabase_9i+10.32%18y ago15-07-2008 23:00Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors.CVE-2008-1819oracledatabase_9i+10.43%18y ago16-04-2008 10:00Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09.

All vulnerabilities indatabase_10g database_9i

CVE-2008-2595: oracle database_10g

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References