Lucene search

[email protected]CVE-2006-1037

HistoryMar 07, 2006 - 11:02 a.m.

CVE-2006-1037

2006-03-0711:02:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-1037

sql injection

oracle

diagnostics module

nvd

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.1%

JSON

SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

CPENameOperatorVersion
oracle:e-business_suiteoracle e-business suiteeq11.5.10.1
oracle:e-business_suiteoracle e-business suiteeq11.5.5
oracle:e-business_suiteoracle e-business suiteeq11.5.4
oracle:diagnosticsoracle diagnosticseq2.2
oracle:e-business_suiteoracle e-business suiteeq11.5.7
oracle:e-business_suiteoracle e-business suiteeq11.5.10.2
oracle:e-business_suiteoracle e-business suiteeq11.5.10
oracle:diagnosticsoracle diagnosticseq2.1
oracle:e-business_suiteoracle e-business suiteeq11.5.8
oracle:e-business_suiteoracle e-business suiteeq11.5.9

CPE	Name	Operator	Version
oracle:e-business_suite	oracle e-business suite	eq	11.5.10.1
oracle:e-business_suite	oracle e-business suite	eq	11.5.5
oracle:e-business_suite	oracle e-business suite	eq	11.5.4
oracle:diagnostics	oracle diagnostics	eq	2.2
oracle:e-business_suite	oracle e-business suite	eq	11.5.7
oracle:e-business_suite	oracle e-business suite	eq	11.5.10.2
oracle:e-business_suite	oracle e-business suite	eq	11.5.10
oracle:diagnostics	oracle diagnostics	eq	2.1
oracle:e-business_suite	oracle e-business suite	eq	11.5.8
oracle:e-business_suite	oracle e-business suite	eq	11.5.9

Rows per page:

1-10 of 131

References

secunia.com/advisories/19076

www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf

www.securityfocus.com/bid/16844

exchange.xforce.ibmcloud.com/vulnerabilities/25259

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.1%

JSON

Related for CVE-2006-1037

prion1