vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2004-1370

N/A
Published: January 19, 2005 at 05:00 AM UTC
Updated: June 16, 2026 at 10:07 PM UTC
9 products affected across 1 vendorE Business SuiteApplication ServerEnterprise Manager Grid Control

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 4%

Description

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Application Server· Oracle
95%
9.0.29.0.2.0.09.0.2.0.19.0.2.19.0.2.29.0.2.39.0.39.0.3.19.0.49.0.4.09.0.4.1
Collaboration Suite· Oracle
95%
release_1
E Business Suite· Oracle
95%
11.5.111.5.211.5.311.5.411.5.511.5.611.5.711.5.811.5.9
Enterprise Manager· Oracle
95%
99.0.1
Enterprise Manager Database Control· Oracle
95%
10.1.2
Enterprise Manager Grid Control· Oracle
95%
10.1.0.2
ORACLE10G· Oracle
95%
enterprise_10.1.0.2enterprise_9.0.4_.0personal_10.1_.0.2personal_9.0.4_.0standard_10.1_.0.2standard_9.0.4_.0
ORACLE8I· Oracle
95%
enterprise_8.0.5_.0.0enterprise_8.0.6_.0.0enterprise_8.0.6_.0.1enterprise_8.1.5_.0.0enterprise_8.1.5_.0.2enterprise_8.1.5_.1.0enterprise_8.1.6_.0.0enterprise_8.1.6_.1.0enterprise_8.1.7_.0.0enterprise_8.1.7_.1.0enterprise_8.1.7_.4standard_8.0.6standard_8.0.6_.3standard_8.1.5standard_8.1.6standard_8.1.7standard_8.1.7_.0.0standard_8.1.7_.1standard_8.1.7_.4
ORACLE9I· Oracle
95%
client_9.2.0.1client_9.2.0.2enterprise_8.1.7enterprise_9.0.1enterprise_9.0.1.4enterprise_9.0.1.5enterprise_9.2.0enterprise_9.2.0.1enterprise_9.2.0.2enterprise_9.2.0.3enterprise_9.2.0.4enterprise_9.2.0.5personal_8.1.7personal_9.0.1personal_9.0.1.4personal_9.0.1.5personal_9.2personal_9.2.0.1personal_9.2.0.2personal_9.2.0.3personal_9.2.0.4personal_9.2.0.5standard_8.1.7standard_9.0standard_9.0.1standard_9.0.1.2standard_9.0.1.3standard_9.0.1.4standard_9.0.1.5standard_9.0.2standard_9.2standard_9.2.0.1standard_9.2.0.2standard_9.2.0.3standard_9.2.0.4standard_9.2.0.5

References (8)

Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://marc.info/?l=bugtraq&m=110382596129607&w=2
Vendor Advisoryx_refsource_SUNALERT
Source: [email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
Third Party Advisoryx_refsource_CERT-VNUS Government Resource
Source: [email protected]
http://www.kb.cert.org/vuls/id/316206
x_refsource_MISCPatchVendor Advisory
Source: [email protected]
http://www.ngssoftware.com/advisories/oracle23122004H.txt
x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
VDB Entryx_refsource_BIDPatch
Source: [email protected]
http://www.securityfocus.com/bid/10871
Third Party Advisoryx_refsource_CERTPatchUS Government Resource
Source: [email protected]
http://www.us-cert.gov/cas/techalerts/TA04-245A.html
VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/18665

CVSS

7.5HIGH[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card