CVE-2006-5338

no score yetEPSS 3.0%

oracle database server: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors related to sys.dbms_sqltune, aka Vuln# DB10. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB10 is for SQL injection in DROP_SQLSET, DELETE_SQLSET, SELECT_SQLSET, and I_SET_TUNING_PARAMETER. NOTE: some of these vectors might be in DBMS_SQLTUNE_INTERNAL.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2006-10-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:database_server

References

http://secunia.com/advisories/22396
http://securitytracker.com/id?1017077
http://www.databasesecurity.com/oracle/OracleOct2006-CPU-Analysis.pdf
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html

Check your stack JSON