CVE-2006-1037

Published: Mar 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

Affected (13)

Products: Oracle: Diagnostics, E Business Suite

Oracle

2 products

Diagnostics

E Business Suite

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Oracle Diagnostics	Version 2.0
Oracle Diagnostics	Version 2.1
Oracle Diagnostics	Version 2.2
Oracle E Business Suite	Version 11.5.10.1
Oracle E Business Suite	Version 11.5.10.2
Oracle E Business Suite	Version 11.5.10
Oracle E Business Suite	Version 11.5.3
Oracle E Business Suite	Version 11.5.4
Oracle E Business Suite	Version 11.5.5
Oracle E Business Suite	Version 11.5.6
Oracle E Business Suite	Version 11.5.7
Oracle E Business Suite	Version 11.5.8
Oracle E Business Suite	Version 11.5.9