2024-07-14 02:06:08 +00:00

154 lines
5.2 KiB
JSON

{
"id": "CVE-2006-5367",
"sourceIdentifier": "cve@mitre.org",
"published": "2006-10-18T01:07:00.000",
"lastModified": "2018-10-17T21:42:35.750",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.7 a 11.5.10CU2 tienen impacto vectores de ataque remotos autenticados desconocidos, tambi\u00e9n conocidas como Vuln# (1) APPS03 en Oracle Applications Framework, (2) APPS04 en Oracle Applications Technology Stack, (3) APPS05 en Oracle Balanced Scorecard, (4) APPS09 en Oracle Scripting, y (5) APPS10 en Oracle Trading Community."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
"matchCriteriaId": "D07FEA4F-B1C7-4250-81FD-AC1289769348"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
"matchCriteriaId": "78408427-3FFB-45C4-82EF-C8D636B3A718"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
"matchCriteriaId": "C9B1BE09-4A96-41A3-AA1D-74533F396998"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
"matchCriteriaId": "80B61990-9CC2-4215-9879-AC817F4E6767"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*",
"matchCriteriaId": "BC900808-1118-4FC0-9E48-380A02394F45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:*",
"matchCriteriaId": "CD00F5CD-125C-4895-824E-23AC1D9A34BF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:*",
"matchCriteriaId": "9FE95D02-C2A8-4AAC-878B-DFA0FE13B571"
}
]
}
]
}
],
"references": [
{
"url": "http://secunia.com/advisories/22396",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1017077",
"source": "cve@mitre.org"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/20588",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
"source": "cve@mitre.org",
"tags": [
"US Government Resource"
]
},
{
"url": "http://www.vupen.com/english/advisories/2006/4065",
"source": "cve@mitre.org"
}
]
}