CVE-2006-0435 — Vulnetix

CVE-2006-0435 PUBLISHED CVSS 7.5 HIGH

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.

EPSS 3.15% · 87.2th percentile

Risk Scores

CVSS 2.0

7.5

EPSS Score

3.15%

87.2th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	*
oracle	http_server	9.1, 1.0.2.0, 1.0.2.1s_for_apps
oracle	application_server	9.0.4.2, 9.2.0.6, 9.2.0.7

Timeline

Jan 26, 2006 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 4, 2022 EPSS Score
Oct 26, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Mar 7, 2023 EPSS Score
Apr 3, 2023 EPSS Score
May 25, 2023 EPSS Score
Jun 21, 2023 EPSS Score
Sep 8, 2023 EPSS Score

References

19712 third-party-advisory
18621 third-party-advisory
19859 third-party-advisory
20060202 The History of the Oracle PLSQL Gateway Flaw mailing-list
20060125 Workaround for unpatched Oracle PLSQL Gateway flaw mailing-list
402 third-party-advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html url
1015544 vdb
20060131 Re: Workaround for unpatched Oracle PLSQL Gateway flaw mailing-list
ADV-2006-1571 vdb
ADV-2006-0338 vdb
16384 vdb
403 third-party-advisory
SSRT061148 vendor-advisory
oracle-plsql-command-execution(24363) vdb
20060125 Workaround for unpatched Oracle PLSQL Gateway flaw mailing-list
20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw mailing-list
20060208 Re: Workaround for unpatched Oracle PLSQL Gateway flaw mailing-list
20060202 The History of the Oracle PLSQL Gateway Flaw mailing-list
http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html url

…and 6 more

Open in Interactive Console →