Description
Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB07 in the Dictionary component and (2) DB14 in the Oracle Label Security component. NOTE: Oracle has not disputed reliable researcher claims that DB07 involves plaintext storage of the TDE wallet password in a trace file by event 10053.
Remediation
References
Related Vulnerabilities
MySQL CVE-2018-2805 Vulnerability (CVE-2018-2805)
WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability (0.6.2 - 2.8)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-58033)
PHP Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2017-11144)