CVE-2006-0285 — Oracle Application Server vulnerability

3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
1.5%
top 18.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Application ServerOracle Database Server
Timeline
PublishedJan 18
Latest updateMay 1

Description

Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDoracle/database_server8.1.7.4, 9.0.1.5, 9.2.0.7+2
▶NVDoracle/application_server1.0.2.2, 10.1.2.0.2, 9.0.4.2+2

🔴Vulnerability Details

2
GHSA
GHSA-vcmf-jv96-x3v2: Unspecified vulnerability in the Java Net component of Oracle Database Server 8↗2022-05-01
▶
CVEList
CVE-2006-0285: Unspecified vulnerability in the Java Net component of Oracle Database Server 8↗2006-01-18
▶
CVE-2006-0285 — Oracle Application Server vulnerability | cvebase