CVE-2010-0904: Oracle Secure Backup remote integrity flaw via unspecified vectors

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: low.

medium priorityNetwork-reachable with no authentication but limited to integrity impact, with no confirmed exploitation and only a 2010-era CVSS 2.0 score of 5.0.

What it is

Oracle Secure Backup 10.3.0.1 contains an unspecified vulnerability that lets a remote attacker affect integrity through unknown vectors. The record gives no detail on the vulnerable component or mechanism, so defenders cannot scope the flaw from the advisory alone. It matters because the affected product is backup infrastructure, where integrity loss can corrupt or tamper with protected data.

Impact

An attacker gains the ability to modify or corrupt data or configuration within Oracle Secure Backup; confidentiality and availability are not affected per the CVSS vector. The exact integrity impact is unknown because the vulnerability description is unspecified.

Attack surface

Reachable over the network with no authentication required and low attack complexity, per the AV:N/AC:L/Au:N vector. No user interaction is indicated, but the record does not identify the specific interface or service involved.

Exploitation

Not listed in CISA KEV and no reference carries an exploit tag, so there is no confirmed in-the-wild exploitation. EPSS is high at roughly 0.51 (98.9th percentile), suggesting elevated predicted exploitation likelihood despite the lack of public exploit detail.

What to do

• Apply the Oracle Critical Patch Update referenced in the advisory (cpuoct2010) or a later Secure Backup release; this is the only vendor fix path in the record.
• Restrict network access to Oracle Secure Backup management and data services to trusted hosts only.
• Monitor and alert on unexpected configuration or data changes in backup catalogs and stored backups.
• If the product is end-of-life or unsupported, plan migration to a maintained backup platform.

Detection

• Audit Oracle Secure Backup logs for unexpected remote connections or configuration changes.
• Baseline and monitor integrity of backup catalog and configuration files for unauthorized modification.
• Alert on anomalous network traffic to Secure Backup service ports from untrusted sources.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.