← Database

CVE-2004-1368

HIGH CVSS: 7.8 Published: 2004-08-04 Modified: 2026-06-16

Description

ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.

Affected Platforms

Oracle Application ServerOracle Oracle8IOracle Enterprise ManagerOracle Oracle9IOracle Enterprise Manager Database ControlOracle Enterprise Manager Grid ControlOracle Oracle10GOracle E-Business SuiteOracle Collaboration Suite

Weakness Type

NVD-CWE-noinfo

References