Total vulnerabilities in the database
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.
| Software | From | Fixed in |
|---|---|---|
| oracle / database_server | 9.2.0.8 | 9.2.0.8.x |
| oracle / database_server | 9.2.0.8dv | 9.2.0.8dv.x |
| oracle / database_server | 10.1.0.5 | 10.1.0.5.x |