CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3132

SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.8%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2012-3132

Oracle » Database Server » Version: 10.2.0.3

cpe:2.3:a:oracle:database_server:10.2.0.3
Oracle » Database Server » Version: 10.2.0.4

cpe:2.3:a:oracle:database_server:10.2.0.4
Oracle » Database Server » Version: 10.2.0.5

cpe:2.3:a:oracle:database_server:10.2.0.5
Oracle » Database Server » Version: 11.1.0.7

cpe:2.3:a:oracle:database_server:11.1.0.7
Oracle » Database Server » Version: 11.2.0.2

cpe:2.3:a:oracle:database_server:11.2.0.2
Oracle » Database Server » Version: 11.2.0.3

cpe:2.3:a:oracle:database_server:11.2.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3132

Products

Pricing

Contact Us