CVE-2008-3982 json
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows…
published 2008-10-14 18 y ago modified 2026-06-16 4 mo ago also EUVD-2008-3967
- cvss
- 5.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 11.4%
- EPSS 11.4% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Metasploit
Summary
Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LT and WMSYS.LT, a different vulnerability than CVE-2008-3983 and CVE-2008-3984.
Timeline
- First public exploit (Metasploit auxiliary/sqli/oracle/lt_compressworkspace)
- Published
Exploit prediction
11.43% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit auxiliary/sqli/oracle/lt_compressworkspace Oracle DB SQL Injection via SYS.LT.COMPRESSWORKSPACE metasploit auxiliary, normal rank, 2008-10-13
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.5 | AV:N/AC:L/Au:S/C:P/I:P/A:N |
References
-
oracle.com
/technetwork/topics/security/cpuoct2008-100299.html
vendor-advisory
-
secunia.com
/advisories/32291
third-party-advisory, permissions-required
-
securitytracker.com
/id?1021050
vdb-entry, third-party-advisory
-
vupen.com
/english/advisories/2008/2825
vdb-entry, not-applicable
-
exchange.xforce.ibmcloud.com
/vulnerabilities/45885
vdb-entry
Sources
- CVE List CVE-2008-3982
- NVD CVE-2008-3982
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.