CVE-2004-0543 Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
HighCVSS 10.0
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle applications | = 11.0 | No fix listed |
| oracle e-business suite | = 11.5.1 | No fix listed |
| oracle e-business suite | = 11.5.2 | No fix listed |
| oracle e-business suite | = 11.5.3 | No fix listed |
| oracle e-business suite | = 11.5.4 | No fix listed |
| oracle e-business suite | = 11.5.5 | No fix listed |
| oracle e-business suite | = 11.5.6 | No fix listed |
| oracle e-business suite | = 11.5.7 | No fix listed |
| oracle e-business suite | = 11.5.8 | No fix listed |
| oracle e-business suite | = 11i | No fix listed |
References
- 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite mailing-list
- 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite mailing-list
- otn.oracle.com
- O-153 government-resource third-party-advisory
- www.integrigy.com
- VU#961579 patch third-party-advisory us-government-resource
- 10465 patch vdb-entry vendor-advisory
- TA04-160A patch third-party-advisory us-government-resource
- oracle-ebusiness-sql-injection(16324) vdb-entry