CVE-2005-4832
oracle oracle10g: no CVSS score yet. EPSS 43% chance of exploitation in the next 30 days.
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQL commands with elevated privileges via the SUBSCRIPTION_NAME parameter in the (1) SYS.DBMS_CDC_SUBSCRIBE and (2) SYS.DBMS_CDC_ISUBSCRIBE packages, a different vector than CVE-2005-1197.
- EPSS
- 43% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
References
- http://www.appsecinc.com/resources/alerts/oracle/2005-02.html
- http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt
- http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEWorkaround.sql
- http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
- http://www.securityfocus.com/archive/1/396133