Login Request a demo
Unscored severity · published Nov 2, 2005
CVE-2005-3454
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by…
–
CVSS
3.8%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10g Release 1 version 10.1.1 and 9i Release 2 9.0.4.2 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04 for Calendar; (5) OCS05, (6) OCS06, (7) OCS07, (8) OCS08, (9) OCS09, and (10) OCS10 for Email Server; and (11) OCS11, (12) OCS12, and (13) OCS13 for Oracle Files.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Collaboration Suite · Oracle
9.0.4.2; 10.1.1 · source: NVD
Affected product
CS
Collaboration Suite
Oracle
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3454
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3454
secunia.com
http://secunia.com/advisories/17250
US Government Resource
http://www.kb.cert.org/vuls/id/210524
www.oracle.com
http://www.oracle.com/technetwork/topics/security/cpuoct2005-090497.html
www.securityfocus.com
http://www.securityfocus.com/bid/15134
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-292A.html
More from Collaboration Suite
9.8
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check…
–
CVE-2010-0881
Unspecified vulnerability in the User Interface Components in Oracle Collaboration Suite 10.1.2.4 allows remote attackers to affect integrity via unknown vectors
–
CVE-2008-4016
Unspecified vulnerability in the Collaborative Workspaces component in Oracle Collaboration Suite 10.1.2 allows remote authenticated users to affect confidentiality via unknown…
–
CVE-2008-1814
Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application…
–
CVE-2008-0346
Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka…