Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Oracle8i
Total 46 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0326 1 Oracle 2 Application Server, Oracle8i 2026-06-16 7.5 HIGH N/A
Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
CVE-2001-0126 1 Oracle 1 Oracle8i 2026-06-16 7.5 HIGH N/A
Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.
CVE-2000-1180 1 Oracle 1 Oracle8i 2026-06-16 4.6 MEDIUM N/A
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
CVE-2000-0206 1 Oracle 1 Oracle8i 2026-06-16 6.2 MEDIUM N/A
The installation of Oracle 8.1.5.x on Linux follows symlinks and creates the orainstRoot.sh file with world-writeable permissions, which allows local users to gain privileges.
CVE-1999-0888 1 Oracle 2 Database Server, Oracle8i 2026-06-16 4.6 MEDIUM N/A
dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script.
CVE-1999-0711 1 Oracle 1 Oracle8i 2026-06-16 4.6 MEDIUM N/A
The oratclsh interpreter in Oracle 8.x Intelligent Agent for Unix allows local users to execute Tcl commands as root.