Oracle : Security Vulnerabilities, CVEs, Published In 2004 (Sql injection) CVSS score >= 3
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
Max CVSS
7.5
EPSS Score
1.19%
Published
2004-08-04
Updated
2017-07-11
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
Max CVSS
6.5
EPSS Score
0.09%
Published
2004-12-23
Updated
2017-07-11
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
Max CVSS
10.0
EPSS Score
0.41%
Published
2004-08-06
Updated
2017-07-11
3 vulnerabilities found