Unscored severity · published Jul 15, 2008
CVE-2008-2602
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to the IMP_FULL_DATABASE role.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DP
Data Pump Component · Oracle
All versions, or not specified · source: NVD
DS
Database Server · Oracle
10.1.0.5; 10.2.0.4; 11.1.0.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2602
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2602
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143
secunia.com
http://secunia.com/advisories/31087
secunia.com
http://secunia.com/advisories/31113
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpujul2008-090335.html
www.securitytracker.com
http://www.securitytracker.com/id?1020499
www.vupen.com
http://www.vupen.com/english/advisories/2008/2109/references
More from Data Pump Component
–
CVE-2008-2608
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to…