Description
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.
Remediation
References
Related Vulnerabilities
Drupal Core 4.6.x Denial of Service (4.6.0 - 4.6.10)
WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Security Bypass (2.7.2)
Oracle Application Server Other Vulnerability (CVE-2007-2119)
WordPress Plugin Follow Me Cross-Site Request Forgery (3.1.1)
WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (5.2.2)