CVE-2008-3979

no score yetEPSS 32%

Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability that allows remote authenticated users to gain MDSYS privileges via the MDSYS.SDO_TOPO_DROP_FTBL trigger.

EPSS: 32% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2009-01-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:database_10g

References

http://osvdb.org/51354
http://secunia.com/advisories/33525
http://www.oracle.com/technetwork/topics/security/cpujan2009-097901.html
http://www.securityfocus.com/archive/1/500061/100/0/threaded
http://www.securityfocus.com/bid/33177

Check your stack JSON