Oracle Express 10G Vulnerability Report
737966Nov 30 2009 — edited May 25 2010It is my understanding that Oracle Express 10G (10.2.0.2) release 2 does not have security patches released. The plan is to release another version (11g) when available. Is this correct?
Is there any report that states Oracle Express 10G edition is vulnerable\not vulnerable to known security exploits? I have found very little information. What I have found is basically "Vulnerabilities may affect Oracle Database 10g Express Edition (XE). According to Oracle, Oracle Database XE is based on the Oracle Database 10g Release 2 code".
What is Oracle's stance on security patches for Oracle Express? I imagine it states "if you're concerned there is an Enterprise edition that can be purchased with regular security patches".