PT-2007-6733 · Oracle · E-Business Suite

Joxean Koret · Published 2007-11-08 · Updated 2018-10-15 · CVE-2007-5766

Mitre

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2007-5766

Affected Products

E-Business Suite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-5766 · Security Note
• http://securityfocus.com/archive/1/483098/100/100/threaded · Note
• http://osvdb.org/40080 · Note
• http://securityreason.com/securityalert/3344 · Note
• http://oracle.com/technetwork/topics/security/cpuoct2007-092913.html · Note
• http://zerodayinitiative.com/advisories/ZDI-07-058.html · Note