CVE-2004-1368

published 2004-08-04

CVE-2004-1368: ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix…

Priority P4 34 high 7.8 CVSS 2.0

AV N AC L Au N C C I N A N

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

Affected

86 ranges · showing 25

Vendor	Product	Version range	Fixed in
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	application_server	—	—
oracle	collaboration_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—
oracle	enterprise_manager	—	—
oracle	enterprise_manager	—	—
oracle	enterprise_manager_database_control	—	—
oracle	enterprise_manager_grid_control	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.