CVE-2005-4832

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via…

published March 3, 2007

CVSS

—

EPSS

43%

Percentile

98.7

In the wild

Unconfirmed

What it is

SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.42693 · 98.7th percentile
Published: 2007-03-03T20:00Z

EPSS history

Timeline

03 MAR 20:00Z
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via…
cvelistv5