CVE-2006-0275 json
Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack…
published 2006-01-18 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-0282
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.0%
- EPSS 5.0% chance of exploitation in 30 days, percentile 92%
- public exploits
- 0
- none known
Summary
Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.
Exploit prediction
5.01% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
-
secunia.com
/advisories/18493
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2006/0323
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2006/0243
vdb-entry, vendor-advisory
-
secunia.com
/advisories/18608
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/24321
vdb-entry
-
securityfocus.com
/bid/16287
vdb-entry
-
kb.cert.org
/vuls/id/545804
third-party-advisory, us-government-resource
-
securitytracker.com
/id?1015499
vdb-entry
- oracle.com /technetwork/topics/security/cpujan2006-082403.html
- red-database-security.com /advisory/oracle_reports_read_any_xml_file.html
-
securityfocus.com
/archive/1/422261/30/7430/threaded
mailing-list
Sources
- CVE List CVE-2006-0275
- NVD CVE-2006-0275
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.