What’s Vulnerable › Vulnerabilities

CVE-2005-1197

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-05-02 · updated 2026-06-16

Description

SQL injection vulnerability in the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure in Oracle Database Server 10g allows remote attackers to execute arbitrary SQL commands via the CHANGE_SET_NAME parameter.

Affected products

• Oracle Database: 10.1.0.2, 10.1.0.3, 10.1.0.3.1, 10.1.0.4

References

• http://marc.info/?l=bugtraq&m=111385690419118&w=2
• http://www.kb.cert.org/vuls/id/948486
• http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
• http://www.us-cert.gov/cas/techalerts/TA05-117A.html
• http://marc.info/?l=bugtraq&m=111385690419118&w=2
• http://www.kb.cert.org/vuls/id/948486
• http://www.oracle.com/technology/deploy/security/pdf/cpuapr2005.pdf
• http://www.us-cert.gov/cas/techalerts/TA05-117A.html

Get alerted when CVE-2005-1197 or the next vulnerability affects your stack