CVE-2016-5505

MEDIUM

Oracle Database Server 11.2.0.4 and 12.1.0.2 - Exposure of Sensitive Information in RDBMS Programmable Interface

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the RDBMS Programmable Interface component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1037035
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93613

Scores

CVSS v3 5.5
EPSS 0.0039
EPSS Percentile 30.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (2)
oracle/database_server 11.2.0.4
oracle/database_server 12.1.0.2
Published Oct 25, 2016
Tracked Since Feb 18, 2026