CVE-2009-1977

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 72.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-07-14 · updated 2026-06-16

Description

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php.

Affected products

Oracle Corporation Oracle Secure Backup: 10.2.0.3

References

http://osvdb.org/55903
http://secunia.com/advisories/35776
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
http://www.securityfocus.com/bid/35672
http://www.securitytracker.com/id?1022565
http://www.vupen.com/english/advisories/2009/1900
http://www.zerodayinitiative.com/advisories/ZDI-09-058/
https://exchange.xforce.ibmcloud.com/vulnerabilities/51761
http://osvdb.org/55903
http://secunia.com/advisories/35776
http://www.oracle.com/technetwork/topics/security/cpujul2009-091332.html
http://www.securityfocus.com/bid/35672

Get alerted when CVE-2009-1977 or the next vulnerability affects your stack