Description

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."

Remediation

References

CVE-2014-2408

Related Vulnerabilities

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-1036)

Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-5190)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-27425)

MySQL CVE-2018-3171 Vulnerability (CVE-2018-3171)

MongoDb Improper Input Validation Vulnerability (CVE-2012-6619)

Severity

Medium

Classification

CVE-2014-2408

Tags

Missing Update Known Vulnerabilities