7.8

CVE-2004-1368

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

Data is provided by the National Vulnerability Database (NVD)
Oracle ≫ Application Server Version9.0.2
Oracle ≫ Application Server Version9.0.2.0.0
Oracle ≫ Application Server Version9.0.2.0.1
Oracle ≫ Application Server Version9.0.2.1
Oracle ≫ Application Server Version9.0.2.2
Oracle ≫ Application Server Version9.0.2.3
Oracle ≫ Application Server Version9.0.3
Oracle ≫ Application Server Version9.0.3.1
Oracle ≫ Application Server Version9.0.4
Oracle ≫ Application Server Version9.0.4.0
Oracle ≫ Application Server Version9.0.4.1
Oracle ≫ Collaboration Suite Versionrelease_1
Oracle ≫ E-business Suite Version11.5.1
Oracle ≫ E-business Suite Version11.5.2
Oracle ≫ E-business Suite Version11.5.3
Oracle ≫ E-business Suite Version11.5.4
Oracle ≫ E-business Suite Version11.5.5
Oracle ≫ E-business Suite Version11.5.6
Oracle ≫ E-business Suite Version11.5.7
Oracle ≫ E-business Suite Version11.5.8
Oracle ≫ E-business Suite Version11.5.9
Oracle ≫ Enterprise Manager Version9
Oracle ≫ Enterprise Manager Version9.0.1
Oracle ≫ Oracle10g Versionenterprise_9.0.4_.0
Oracle ≫ Oracle10g Versionenterprise_10.1.0.2
Oracle ≫ Oracle10g Versionpersonal_9.0.4_.0
Oracle ≫ Oracle10g Versionpersonal_10.1_.0.2
Oracle ≫ Oracle10g Versionstandard_9.0.4_.0
Oracle ≫ Oracle10g Versionstandard_10.1_.0.2
Oracle ≫ Oracle8i Versionenterprise_8.0.5_.0.0
Oracle ≫ Oracle8i Versionenterprise_8.0.6_.0.0
Oracle ≫ Oracle8i Versionenterprise_8.0.6_.0.1
Oracle ≫ Oracle8i Versionenterprise_8.1.5_.0.0
Oracle ≫ Oracle8i Versionenterprise_8.1.5_.0.2
Oracle ≫ Oracle8i Versionenterprise_8.1.5_.1.0
Oracle ≫ Oracle8i Versionenterprise_8.1.6_.0.0
Oracle ≫ Oracle8i Versionenterprise_8.1.6_.1.0
Oracle ≫ Oracle8i Versionenterprise_8.1.7_.0.0
Oracle ≫ Oracle8i Versionenterprise_8.1.7_.1.0
Oracle ≫ Oracle8i Versionenterprise_8.1.7_.4
Oracle ≫ Oracle8i Versionstandard_8.0.6
Oracle ≫ Oracle8i Versionstandard_8.0.6_.3
Oracle ≫ Oracle8i Versionstandard_8.1.5
Oracle ≫ Oracle8i Versionstandard_8.1.6
Oracle ≫ Oracle8i Versionstandard_8.1.7
Oracle ≫ Oracle8i Versionstandard_8.1.7_.0.0
Oracle ≫ Oracle8i Versionstandard_8.1.7_.1
Oracle ≫ Oracle8i Versionstandard_8.1.7_.4
Oracle ≫ Oracle9i Versionclient_9.2.0.1
Oracle ≫ Oracle9i Versionclient_9.2.0.2
Oracle ≫ Oracle9i Versionenterprise_8.1.7
Oracle ≫ Oracle9i Versionenterprise_9.0.1
Oracle ≫ Oracle9i Versionenterprise_9.0.1.4
Oracle ≫ Oracle9i Versionenterprise_9.0.1.5
Oracle ≫ Oracle9i Versionenterprise_9.2.0
Oracle ≫ Oracle9i Versionenterprise_9.2.0.1
Oracle ≫ Oracle9i Versionenterprise_9.2.0.2
Oracle ≫ Oracle9i Versionenterprise_9.2.0.3
Oracle ≫ Oracle9i Versionenterprise_9.2.0.4
Oracle ≫ Oracle9i Versionenterprise_9.2.0.5
Oracle ≫ Oracle9i Versionpersonal_8.1.7
Oracle ≫ Oracle9i Versionpersonal_9.0.1
Oracle ≫ Oracle9i Versionpersonal_9.0.1.4
Oracle ≫ Oracle9i Versionpersonal_9.0.1.5
Oracle ≫ Oracle9i Versionpersonal_9.2
Oracle ≫ Oracle9i Versionpersonal_9.2.0.1
Oracle ≫ Oracle9i Versionpersonal_9.2.0.2
Oracle ≫ Oracle9i Versionpersonal_9.2.0.3
Oracle ≫ Oracle9i Versionpersonal_9.2.0.4
Oracle ≫ Oracle9i Versionpersonal_9.2.0.5
Oracle ≫ Oracle9i Versionstandard_8.1.7
Oracle ≫ Oracle9i Versionstandard_9.0
Oracle ≫ Oracle9i Versionstandard_9.0.1
Oracle ≫ Oracle9i Versionstandard_9.0.1.2
Oracle ≫ Oracle9i Versionstandard_9.0.1.3
Oracle ≫ Oracle9i Versionstandard_9.0.1.4
Oracle ≫ Oracle9i Versionstandard_9.0.1.5
Oracle ≫ Oracle9i Versionstandard_9.0.2
Oracle ≫ Oracle9i Versionstandard_9.2
Oracle ≫ Oracle9i Versionstandard_9.2.0.1
Oracle ≫ Oracle9i Versionstandard_9.2.0.2
Oracle ≫ Oracle9i Versionstandard_9.2.0.3
Oracle ≫ Oracle9i Versionstandard_9.2.0.4
Oracle ≫ Oracle9i Versionstandard_9.2.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 5.3% 0.89
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N
http://www.us-cert.gov/cas/techalerts/TA04-245A.html
Patch
Third Party Advisory
US Government Resource