« Volver al listado

CVE-2006-5367

Estado: ModificadaAlta (9)—

Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.7 a 11.5.10CU2 tienen impacto vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) APPS03 en Oracle Applications Framework, (2) APPS04 en Oracle Applications Technology Stack, (3) APPS05 en Oracle Balanced Scorecard, (4) APPS09 en Oracle Scripting, y (5) APPS10 en Oracle Trading Community.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Oracle — E-business Suite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5367",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-10-18T01:07:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/22396",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017077",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/20588",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4065",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/22396",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017077",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/449711/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/20588",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/cas/techalerts/TA06-291A.html",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4065",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en Oracle E-Business Suite 11.5.7 a 11.5.10CU2 tienen impacto vectores de ataque remotos autenticados desconocidos, también conocidas como Vuln# (1) APPS03 en Oracle Applications Framework, (2) APPS04 en Oracle Applications Technology Stack, (3) APPS05 en Oracle Balanced Scorecard, (4) APPS09 en Oracle Scripting, y (5) APPS10 en Oracle Trading Community."
    }
  ],
  "lastModified": "2026-06-16T22:31:03.760",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6C3E4A5C-8D0F-4105-8618-26586BEDE84B"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D07FEA4F-B1C7-4250-81FD-AC1289769348"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78408427-3FFB-45C4-82EF-C8D636B3A718"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9B1BE09-4A96-41A3-AA1D-74533F396998"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F6AEEED-E84B-481C-8A47-91FA4835D6F7"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80B61990-9CC2-4215-9879-AC817F4E6767"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC900808-1118-4FC0-9E48-380A02394F45"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD00F5CD-125C-4895-824E-23AC1D9A34BF"
            },
            {
              "criteria": "cpe:2.3:a:oracle:e-business_suite:11.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FE95D02-C2A8-4AAC-878B-DFA0FE13B571"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}