vulnwire
9.0crit

CVE-2006-5367

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
9.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.9%
percentile 87%
Public exploits
0
none known

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community.

Exploit prediction (EPSS)

2.90% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.09.0AV:N/AC:L/Au:S/C:C/I:C/A:C

References

  • red-database-security.com /advisory/oracle_cpu_oct_2006.html · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/20588 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /archive/1/449711/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • oracle.com /technetwork/topics/security/cpuoct2006-095368.html · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2006/4065 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/22396 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /id?1017077 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • us-cert.gov /cas/techalerts/TA06-291A.html · third-party-advisory, x_refsource_CERT, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.