PT-2006-6071 · Oracle · Oracle Application Express

Publicado 2006-10-18 · Atualizado 2018-10-17 · CVE-2006-5351

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Application Express versions 1.5 up to 2.0

Description The issue affects Oracle Application Express and has unknown impact with remote attack vectors. It is likely associated with cross-site scripting (XSS) in WWV FLOW ITEM HELP and NOTIFICATION MSG.

Recommendations For Oracle Application Express versions 1.5 up to 2.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2006-5351

Produtos afetados

Oracle Application Express

Referências · 9

• http://vupen.com/english/advisories/2006/4065 · Aviso do Fabricante
• http://secunia.com/advisories/22396 · Aviso do Fabricante
• http://securityfocus.com/archive/1/449711/100/0/threaded · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA06-291A.html · Nota
• http://securitytracker.com/id?1017077 · Nota
• http://red-database-security.com/advisory/oracle_cpu_oct_2006.html · Nota
• http://securityfocus.com/bid/20588 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-5351 · Nota de Segurança
• http://oracle.com/technetwork/topics/security/cpuoct2006-095368.html · Nota