CVE-2009-1968

Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors

published July 14, 2009

CVSS

—

EPSS

40%

Percentile

98.6

In the wild

Unconfirmed

What it is

Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.40079 · 98.6th percentile
Published: 2009-07-14T23:00Z

EPSS history

Timeline

14 JUL 23:00Z
Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors
cvelistv5