Unscored severity · published Mar 7, 2006
CVE-2006-1037
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors
–
CVSS
1.8%
EPSS
No
On KEV
Description
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Diagnostics · Oracle
2.0; 2.1; 2.2 · source: NVD
ES
E-business Suite · Oracle
11.5.3; 11.5.4; 11.5.5; 11.5.6; 11.5.7; 11.5.8; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1037
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1037
secunia.com
http://secunia.com/advisories/19076
Vendor Advisory
http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/16844
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25259
More from Diagnostics
–
CVE-2006-1035
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors
–
CVE-2006-1036
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."