Intrusion PreventionOracle.Workspace.Manager.SQL.Injection
Description
This indicates an attack attempt against any of multiple SQL Injection vulnerabilities Oracle Database.
The vulnerabilities are caused by errors in the Workspace Manager component. Remote attackers may exploit this to execute arbitrary code, disclose sensitive information, or cause denial of service.
Affected Products
Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6
Impact
Security Bypass: Remote attackers can bypass security checking of vulnerable systems.
Recommended Actions
Please refer to the vendor's website for detailed information:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2009.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17270 |
| Created | Mar 12, 2009 |
| Updated | Mar 20, 2023 |
| Risk |
|
| CVE ID | CVE-2008-3984 CVE-2008-3982 CVE-2008-3983 |
| Exploit Prediction Score | 95.81% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Oracle |