5

CVE-2006-0275

Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04.  NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Server Version9.0.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.01% 0.911
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18493
Vendor Advisory
http://secunia.com/advisories/18608
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.vupen.com/english/advisories/2006/0323
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html
http://securitytracker.com/id?1015499
http://www.kb.cert.org/vuls/id/545804
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/16287
http://www.vupen.com/english/advisories/2006/0243
Vendor Advisory
http://www.securityfocus.com/archive/1/422261/30/7430/threaded