SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-0287

Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.

HIGH 10.0EPSS 29.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 29.0%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
29.01% probability · 98th percentile
CISA KEV
Not listed
Affected
oracle/application server · oracle/database server
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.