CVE-2005-2371

no score yetEPSS 22%

oracle reports: no CVSS score yet. EPSS 22% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2005-07-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:reports

References

http://marc.info/?l=bugtraq&m=112180096507467&w=2
http://secunia.com/advisories/18493
http://secunia.com/advisories/18608
http://securitytracker.com/id?1014524
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html

Check your stack JSON