high7.5
CVE-2006-1037
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vecto…
Impact
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Diagnostics | Versions 2.0, 2.1, 2.2 |
| Oracle | E-Business Suite | Versions 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19076
- http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf
- http://www.securityfocus.com/bid/16844
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25259
- http://secunia.com/advisories/19076
- http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf
- http://www.securityfocus.com/bid/16844
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25259