Intrusion PreventionOracle.SYS.DBMSMETADATA.SQL.Injection
Description
This indicates a possible attack against an SQL-Injection vulnerability in Oracle database.
The vulnerability is due to the application's failure to properly validate user-supplied data. An attacker may exploit this to acquire or modify data, or to exploit other vulnerabilities in the database.
Affected Products
Oracle Oracle9i Standard Edition 9.2.6 and earlier
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to a non-vulnerable version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 11875 |
| Created | Apr 25, 2006 |
| Updated | Nov 03, 2021 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Oracle |