PT-2007-6733 · Oracle · E-Business Suite

Joxean Koret · Publicado 2007-11-08 · Atualizado 2018-10-15 · CVE-2007-5766

Mitre

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2007-5766

Produtos afetados

E-Business Suite

Referências · 6

• http://securityfocus.com/archive/1/483098/100/100/threaded · Nota
• http://osvdb.org/40080 · Nota
• http://securityreason.com/securityalert/3344 · Nota
• http://oracle.com/technetwork/topics/security/cpuoct2007-092913.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5766 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-07-058.html · Nota