NVD

Id
59015  
Name
CVE-2006-0275  
Description
Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-01-18  
Modified Date
2012-10-22  
Seq
2006-0275  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303131 59015 CVE-2006-0275 1015499  View
303132 59015 CVE-2006-0275 VU#545804  View
303133 59015 CVE-2006-0275 http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html  View
303134 59015 CVE-2006-0275 http://www.red-database-security.com/advisory/oracle_reports_read_any_xml_file.html  View
303135 59015 CVE-2006-0275 20060117 Oracle Reports - Read parts of files via customize(fixed after 875 days)  View
303136 59015 CVE-2006-0275 16287  View
303137 59015 CVE-2006-0275 ADV-2006-0243  View
303138 59015 CVE-2006-0275 ADV-2006-0323  View
303139 59015 CVE-2006-0275 oracle-january2006-update(24321)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57849 JVNDB-2006-000045 Oracle Application Server の Oracle Reports Developer コンポーネントにおける脆弱性 (REP04) ------------ CVE-2006-0275 16377 CVE-2006-0275 59015 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000045.html 2006-01-17 2007-04-01 View