{"id":"CVE-2011-2253","description":"Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability, related to SYSDBA.","cvssScore":7.1,"cvssVersion":"2.0","cvssVector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","cvssMetrics":[{"version":"2.0","score":7.1,"vector":"AV:N/AC:H/Au:S/C:C/I:C/A:C","source":"nvd@nist.gov","sourceName":"NVD","type":"Primary"}],"resolved":"OUT-OF-SCOPE","published":"2011-07-20","lastModified":"2026-06-16","affectedProducts":[{"vendor":"oracle","product":"database server","version":"10.2.0.3"},{"vendor":"oracle","product":"database server","version":"10.2.0.4"},{"vendor":"oracle","product":"database server","version":"10.2.0.5"},{"vendor":"oracle","product":"database server","version":"11.1.0.7"},{"vendor":"oracle","product":"database server","version":"11.2.0.1"},{"vendor":"oracle","product":"database server","version":"11.2.0.2"}],"totalAffectedProducts":1,"references":[{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html","source":"secalert_us@oracle.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA11-201A.html","source":"secalert_us@oracle.com","tags":["US Government Resource"]}],"reasoning":{"decidingSource":"h2-out-of-scope-with-cpe","decidingReason":"Manual classification marked OUT-OF-SCOPE but CVE matches known CPE products","verdicts":[{"rule":"rejected","stage":"identity","outcome":"no-match"},{"rule":"armr-patch-file","stage":"scope","outcome":"no-match"},{"rule":"armr-secure-rule-file","stage":"scope","outcome":"no-match"},{"rule":"manual-classification","stage":"scope","outcome":"no-match"},{"rule":"h2-history","stage":"scope","outcome":"matched","status":"OUT-OF-SCOPE","detail":"Found in legacy manual classifications","decisive":true}]},"oracleAdvisories":[{"advisory":"Oracle Critical Patch Update July 2011","releaseType":"CPU","quarter":"2011-Q3","url":"https://www.oracle.com/security-alerts/cpujuly2011.html","products":[{"product":"Oracle Database Server","component":"Core RDBMS","affectedVersions":"10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.1, 11.2.0.2"}]}],"assessment":{"record":{"state":"active"},"protection":{"level":"none"},"action":{"state":"not-needed","type":"none"},"review":{"state":"human","basis":"manual-review"}},"signals":{"hasPOC":false,"pocCount":0},"kev":{"inKEV":false},"epss":{"available":true,"score":0.02032,"percentile":0.80002},"ssvc":{"available":false}}