5.5med
CVE-2008-39842 exploits
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
5.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
41.8%
percentile 99%
Public exploits
2
Metasploit · Exploit-DB
Summary
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3982 and CVE-2008-3983.
Exploit prediction (EPSS)
41.81% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit auxiliary/sqli/oracle/lt_removeworkspace Oracle DB SQL Injection via SYS.LT.REMOVEWORKSPACE · metasploit auxiliary, normal rank · 2008-10-13
- EDB-7675 Oracle 10g - SYS.LT.REMOVEWORKSPACE SQL Injection · local · 2009-01-06
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:P/I:P/A:N |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/45887 · vdb-entry, x_refsource_XF, x_transferred
- oracle.com /technetwork/topics/security/cpuoct2008-100299.html · x_refsource_CONFIRM, x_transferred
- secunia.com /advisories/32291 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securitytracker.com /id?1021050 · vdb-entry, x_refsource_SECTRACK, x_transferred
- vupen.com /english/advisories/2008/2825 · vdb-entry, x_refsource_VUPEN, x_transferred
Sources
- CVE List: CVE-2008-3984
- NVD: CVE-2008-3984
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.