The package SYS.DBMS_LOGMNR_SESSION contains a SQL injection vulnerability in the procedure DELETE_FROM_TABLE. Oracle fixed this problem by using the package DBMS_ASSERT.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45878/SYS.DBMS_LOGMNR_SESSION.txt
Source: https://packetstormsecurity.com/files/45878/SYS.DBMS_LOGMNR_SESSION.txt.html