Unrated severityNVD Advisory· Published Aug 10, 2012· Updated Apr 29, 2026
CVE-2012-3132
CVE-2012-3132
Description
SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS.
Affected products
6cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:oracle:database_server:10.2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:10.2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:11.2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:database_server:11.2.0.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.oracle.com/technetwork/topics/security/alert-cve-2012-3132-1721017.htmlnvdVendor Advisory
- blogs.oracle.com/security/entry/security_alert_cve_2012_3132nvdVendor Advisory
- www.darkreading.com/database-security/167901020/security/news/240004776/hacking-oracle-database-indexes.htmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.networkworld.com/news/2012/072712-black-hat-shark-bitten-security-researcher-261203.htmlnvd
- www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.htmlnvd
- www.securitytracker.com/idnvd
- www.teamshatter.com/topics/general/team-shatter-exclusive/ctxsys-context-privilege-escalation/nvd
News mentions
0No linked articles in our index yet.