VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 22, 2009· Updated Jun 16, 2026

CVE-2009-1991

CVE-2009-1991

Description

Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Oracle Corporation/Database Server4 versions
    cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*
  • Oracle Corporation/Database 9illm-create
    Range: 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.