---
title: "New research shows SQL Server 2005 more secure than Oracle"
url: "https://osherove.com/blog/2006/11/30/new-research-shows-sql-server-2005-more-secure-than-oracle.md"
canonical: "https://osherove.com/blog/2006/11/30/new-research-shows-sql-server-2005-more-secure-than-oracle.html"
published: "2006-11-30T18:11:39"
updated: "2006-11-30T18:11:39"
tags: [".NET", "SQL Server"]
author: "Roy Osherove"
description: "Could it be true? A research shows that there were no security flaw fixes in SQL 2005 since its release (it does not show non-fixed flaws) compared to Oracle. Is Microsoft's Secure Development Lifecycle initiative…"
usage: "Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page)."
license: "https://creativecommons.org/licenses/by/4.0/"
---

# New research shows SQL Server 2005 more secure than Oracle

By Roy Osherove November 30, 2006 In [.NET](https://osherove.com/blog/category/net), [SQL Server](https://osherove.com/blog/category/sql-server)

**Historical article** · Originally published November 30, 2006; technical details may be outdated.

[Could it](http://bloggingabout.net/blogs/dennis/archive/2006/11/22/Secure-databases-_3A00_-SQL-Server-vs.-Oracle.aspx) be true? A research shows that there were no security flaw fixes in SQL 2005 since its release (it does not show non-fixed flaws) compared to Oracle.

Is Microsoft's Secure Development Lifecycle initiative paying off?

From [the article](http://www.databasesecurity.com/dbsec/comparison.pdf) \[PDF\]:

"When you look at the graphs, Oracle was pretty secure in the past, but since 2005 the number of security flaws has increased immensely. When we look at the previous SQL Server versions, less security flaws were reported over the years. When we look at SQL Server 2005, **it hasn't had a single security flaw reported since launch**."

Seems hard to believe, actually.

## More in .NET

[All posts in .NET](https://osherove.com/blog/category/net)

- Dec 11, 2006

    ### [Html Agility Pack](https://osherove.com/blog/2006/12/11/html-agility-pack.html)

- Dec 9, 2006

    ### [Unit Testing your ASP.NET Validators - Validation Everywhere](https://osherove.com/blog/2006/12/9/unit-testing-your-aspnet-validators-validation-everywhere.html)

- Nov 7, 2006

    ### [SQL Refactor looks cool](https://osherove.com/blog/2006/11/7/sql-refactor-looks-cool.html)

- Oct 22, 2006

    ### [How to run web services and sites on the same box as sharepoint (avoiding "404 Page Not Found" errors)](https://osherove.com/blog/2006/10/22/how-to-run-web-services-and-sites-on-the-same-box-as-sharepo.html)


---

## About the author

**Roy Osherove**: Senior Solutions Architect at AWS working on AI for production and AI-driven development; author of The Art of Unit Testing and Elastic Leadership, with about 20 years of consulting and training on unit testing, TDD, team leadership and continuous delivery.

### Sites

- [RobotPaper](https://robotpaper.ai/): This blog: AI patterns and anti-patterns, AI and coding agents, and engineering leadership.
- [osherove.com](https://osherove.com): Roy's personal site. Author of The Art of Unit Testing and Elastic Leadership; consulting and training on unit testing, TDD, team leadership and continuous delivery, plus about 20 years of blog posts.
- [The Art of Unit Testing](https://www.artofunittesting.com): The Art of Unit Testing, 3rd Edition (Manning): readable, maintainable, trustworthy unit tests, plus TDD workshops in C#, JavaScript, Java and Kotlin.
- [5whys.com](https://www.5whys.com): Roy's writing on software team leadership: self-organizing teams, surviving chaos, learning mode and the Elastic Leadership model.
- [Pipeline Driven](https://pipelinedriven.org): Continuous delivery and DevOps practices: build patterns, pipeline-friendly testing, DevOps metrics and enterprise DevOps.
- [Elastic Leadership](https://www.elasticleadership.com): Elastic Leadership, Roy's framework for software team leaders (survival, learning and self-organizing modes).

### Social

- X: https://x.com/royosherove
- LinkedIn: https://www.linkedin.com/in/osherove/

### Contact

- Contact form: https://forms.gle/jQSx5KoXvrVA1JCK7

### License

Licensed under CC BY 4.0 — reuse, quote and adapt with attribution (Roy Osherove, link to the original page). License: https://creativecommons.org/licenses/by/4.0/