CVE-2006-0285

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-01-18 · updated 2026-06-16

Description

Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.

Affected products

Oracle Application Server: 1.0.2.2, 9.0.4.2, 10.1.2.0.2
Oracle Database: 8.1.7.4, 9.0.1.5, 9.2.0.7

References

http://secunia.com/advisories/18493
http://secunia.com/advisories/18608
http://securitytracker.com/id?1015499
http://www.kb.cert.org/vuls/id/545804
http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html
http://www.securityfocus.com/bid/16287
http://www.vupen.com/english/advisories/2006/0243
http://www.vupen.com/english/advisories/2006/0323
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
http://secunia.com/advisories/18493
http://secunia.com/advisories/18608
http://securitytracker.com/id?1015499

Get alerted when CVE-2006-0285 or the next vulnerability affects your stack