CVE-2008-3995
Oracle Database <11.1.0.6 - Info Disclosure
Title source: llmDescription
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_CDC_PUBLISH.
Exploits (1)
metasploit
WORKING POC
by MC · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/sqli/oracle/dbms_cdc_publish.rb
References (5)
Scores
EPSS
0.4740
EPSS Percentile
97.6%
Classification
Status
draft
Affected Products (3)
oracle/database_10g
oracle/database_10g
oracle/database_11i
Timeline
Published
Oct 14, 2008
Tracked Since
Feb 18, 2026