CVE-2007-5511

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 31.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-10-17 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably covered by CVE-2007-5510, but there are insufficient details to be certain.

Affected products

Oracle Database: all versions

References

http://marc.info/?l=bugtraq&m=119332677525918&w=2
http://osvdb.org/40079
http://secunia.com/advisories/27251
http://secunia.com/advisories/27409
http://securityreason.com/securityalert/3245
http://www.securityfocus.com/archive/1/482429/100/0/threaded
http://www.securityfocus.com/bid/26098
http://www.securitytracker.com/id?1018823
http://www.vupen.com/english/advisories/2007/3524
http://www.vupen.com/english/advisories/2007/3626
https://www.exploit-db.com/exploits/4570
https://www.exploit-db.com/exploits/4571

Get alerted when CVE-2007-5511 or the next vulnerability affects your stack