CVE-2006-5378 : Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne

Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.

Published 2006-10-18 01:07:00

Updated 2018-10-17 21:42:41

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-5378

Oracle » Enterpriseone » Version: 8.96.d1
cpe:2.3:a:oracle:enterpriseone:8.96.d1:*:*:*:*:*:*:*
Matching versions
Oracle » Enterpriseone » Version: Sp23 O2
cpe:2.3:a:oracle:enterpriseone:sp23_o2:*:*:*:*:*:*:*
Matching versions
Oracle » Enterpriseone » Version: 8.95.p1
cpe:2.3:a:oracle:enterpriseone:8.95.p1:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-5378

EPSS FAQ

1.30%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-5378

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2006-5378

Jump to

Vulnerability Details : CVE-2006-5378

Products affected by CVE-2006-5378

Exploit prediction scoring system (EPSS) score for CVE-2006-5378

CVSS scores for CVE-2006-5378

References for CVE-2006-5378