Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-0435
HistoryJan 26, 2006 - 11:07 a.m.

CVE-2006-0435

2006-01-2611:07:00
mitre
web.nvd.nist.gov
38
oracle
pl/sql
vulnerability
database server
application server
cve-2006-0435
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

High

EPSS

0.015

Percentile

87.0%

JSON

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.

Affected configurations

Nvd
Node
oracleapplication_server
OR
oracleapplication_serverMatch1.0.2
OR
oracleapplication_serverMatch1.0.2.0
OR
oracleapplication_serverMatch1.0.2.1
OR
oracleapplication_serverMatch1.0.2.1s
OR
oracleapplication_serverMatch1.0.2.2
OR
oracleapplication_serverMatch1.0.2.2.2
OR
oracleapplication_serverMatch9.0.2
OR
oracleapplication_serverMatch9.0.2.0.0
OR
oracleapplication_serverMatch9.0.2.0.1
OR
oracleapplication_serverMatch9.0.2.1
OR
oracleapplication_serverMatch9.0.2.2
OR
oracleapplication_serverMatch9.0.2.3
OR
oracleapplication_serverMatch9.0.3
OR
oracleapplication_serverMatch9.0.3.1
OR
oracleapplication_serverMatch9.0.4.0
OR
oracleapplication_serverMatch9.0.4.1
OR
oracleapplication_serverMatch9.0.4.2
OR
oracleapplication_serverMatch9.2.0.6
OR
oracleapplication_serverMatch9.2.0.7
OR
oracleapplication_serverMatch10.1.0.2
OR
oracleapplication_serverMatch10.1.0.3
OR
oracleapplication_serverMatch10.1.0.3.1
OR
oracleapplication_serverMatch10.1.0.4
OR
oracleapplication_serverMatch10.1.2
OR
oracleapplication_serverMatch10.1.2.0.2
OR
oracleapplication_serverMatch10.1.2.1.0
OR
oracleapplication_serverMatch10.1.2_.0.1
OR
oraclehttp_serverMatch1.0.2.0
OR
oraclehttp_serverMatch1.0.2.1
OR
oraclehttp_serverMatch1.0.2.1s_for_apps
OR
oraclehttp_serverMatch1.0.2.2
OR
oraclehttp_serverMatch1.0.2.2_roll_up_2
OR
oraclehttp_serverMatch8.1.7
OR
oraclehttp_serverMatch9.0.1
OR
oraclehttp_serverMatch9.0.2
OR
oraclehttp_serverMatch9.0.2.3
OR
oraclehttp_serverMatch9.0.3.1
OR
oraclehttp_serverMatch9.1
OR
oraclehttp_serverMatch9.2.0
VendorProductVersionCPE
oracleapplication_server*cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*
oracleapplication_server1.0.2cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*
oracleapplication_server1.0.2.0cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*
oracleapplication_server1.0.2.1cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*
oracleapplication_server1.0.2.1scpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*
oracleapplication_server1.0.2.2cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*
oracleapplication_server1.0.2.2.2cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*
oracleapplication_server9.0.2cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*
oracleapplication_server9.0.2.0.0cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*
oracleapplication_server9.0.2.0.1cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 401

References

Related

nvd 1
cvelist 1
cert 1
prion 1
openvas 1
nessus 2
nvd
nvd
CVE-2006-0435
2006-01-26 11:07:00
cvelist
cvelist
CVE-2006-0435
2006-01-26 11:00:00
cert
cert
Oracle PL/SQL Gateway fails to properly validate HTTP requests
2006-01-27 00:00:00
prion
prion
Design/Logic Flaw
2006-01-26 11:07:00
openvas
openvas
Oracle Database Server and Application Server Multiple Unspecified Vulnerabilities
2011-12-07 00:00:00
nessus
nessus
Oracle Database Multiple Vulnerabilities (January 2006 CPU)
2011-11-16 00:00:00
Oracle Application Server Multiple Vulnerabilities
2012-01-24 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.9

Confidence

High

EPSS

0.015

Percentile

87.0%

JSON
Related for CVE-2006-0435
nvd1cvelist1cert1prion1openvas1nessus2