CVE-2006-5599

Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web…

published October 28, 2006

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01704 · 76.9th percentile
Published
2006-10-28T01:00Z
EPSS history
Timeline
  • 28 OCT 01:00Z
    Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web…
    cvelistv5