| Vulnerability Name: | CVE-2010-0860 (CCN-57714) | ||||||||
| Assigned: | 2010-04-13 | ||||||||
| Published: | 2010-04-13 | ||||||||
| Updated: | 2012-10-23 | ||||||||
| Summary: | Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to the Create User privilege. | ||||||||
| CVSS v3 Severity: | 8.0 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.1 High (CVSS v2 Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C) 5.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| References: | Source: MITRE Type: CNA CVE-2010-0860 Source: CCN Type: SA39438 Oracle Database Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 39438 Source: CCN Type: Oracle Critical Patch Update Advisory - April 2010 Oracle Critical Patch Update Advisory - April 2010 Source: CONFIRM Type: UNKNOWN http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html Source: CCN Type: OSVDB ID: 63771 Oracle Database Core RDBMS User Creation Audit Unspecified Remote Issue Source: CCN Type: BID-39333 RETIRED: Oracle April 2010 Critical Patch Update Multiple Vulnerabilities Source: CCN Type: BID-39439 Oracle Database CVE-2010-0860 Remote Core RDBMS Vulnerability Source: CERT Type: US Government Resource TA10-103B Source: XF Type: UNKNOWN odb-corerdbms-unspecified(57714) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||