CVE-2007-5766

published 2007-11-08

CVE-2007-5766: SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
oracle	e-business_suite	—	—
oracle	e-business_suite	—	—

CWE-89