Unscored severity · published Mar 7, 2006
CVE-2006-1035
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors
–
CVSS
2.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Diagnostics · Oracle
2.0; 2.1; 2.2 · source: NVD
ES
E-business Suite · Oracle
11.5.3; 11.5.4; 11.5.5; 11.5.6; 11.5.7; 11.5.8; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1035
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1035
secunia.com
http://secunia.com/advisories/19076
Vendor Advisory
http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf
Third Party Advisory
http://www.kb.cert.org/vuls/id/298958
www.securityfocus.com
http://www.securityfocus.com/bid/16844
More from Diagnostics
–
CVE-2006-1036
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
–
CVE-2006-1037
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors