5.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.0%
The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.
marc.info/?l=bugtraq&m=110608912525883&w=2
www.oracle.com/technology/deploy/security/pdf/cpu-jan-2005_advisory.pdf
www.petefinnigan.com/directory_traversal.pdf
exchange.xforce.ibmcloud.com/vulnerabilities/18947