CVE-2004-1368

No fix known EPSS 6%

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

Published 2005-01-19 · CVE record · OSV

Products: oracle application_server, oracle collaboration_suite, oracle e-business_suite, oracle enterprise_manager, oracle enterprise_manager_database_control, oracle enterprise_manager_grid_control, oracle10g, oracle8i, oracle9i