5.5med
CVE-2008-39832 exploits
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
5.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
41.8%
percentile 99%
Public exploits
2
Metasploit · Exploit-DB
Summary
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3984.
Exploit prediction (EPSS)
41.81% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit auxiliary/sqli/oracle/lt_mergeworkspace Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE · metasploit auxiliary, normal rank · 2008-10-22
- EDB-7676 Oracle 10g - SYS.LT.MERGEWORKSPACE SQL Injection · local · 2009-01-06
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:P/I:P/A:N |
References
- oracle.com /technetwork/topics/security/cpuoct2008-100299.html · x_refsource_CONFIRM, x_transferred
- secunia.com /advisories/32291 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/45886 · vdb-entry, x_refsource_XF, x_transferred
- securitytracker.com /id?1021050 · vdb-entry, x_refsource_SECTRACK, x_transferred
- vupen.com /english/advisories/2008/2825 · vdb-entry, x_refsource_VUPEN, x_transferred
Sources
- CVE List: CVE-2008-3983
- NVD: CVE-2008-3983
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.