Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to "Advisor" and "Select Any Dictionary" privileges.

Remediation

References

CVE-2014-2406

Related Vulnerabilities

MySQL CVE-2022-21599 Vulnerability (CVE-2022-21599)

WordPress Plugin MF Gig Calendar 'page_id' Parameter Cross-Site Scripting (0.9.4.1)

WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767)

MySQL CVE-2020-14656 Vulnerability (CVE-2020-14656)

osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0719)

Severity

High

Classification

CVE-2014-2406

Tags

Missing Update Known Vulnerabilities