Description

The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.

Remediation

References

CVE-2007-5513

Related Vulnerabilities

WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Multiple Vulnerabilities (17.0.17)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35360)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-21608)

WordPress Plugin wp-publications Local File Inclusion (0.0)

Play Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2014-3630)

Severity

Medium

Classification

CVE-2007-5513

Tags

Missing Update Known Vulnerabilities