6.6

CVE-2014-2408

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."

Data is provided by the National Vulnerability Database (NVD)
OracleDatabase Server Version11.1.0.7
OracleDatabase Server Version11.2.0.3
OracleDatabase Server Version11.2.0.4
OracleDatabase Server Version12.1.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.476
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.6 3.9 9.2
AV:N/AC:H/Au:S/C:C/I:C/A:N