Oracle Application Server Vulnerability - CVE-2006-0275 - Vulnerability Database

Oracle Application Server Vulnerability - CVE-2006-0275

Medium
Reference: CVE-2006-0275
Title: Oracle Application Server Vulnerability
Overview:

Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors as identified by Oracle Vuln REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.