Read the docs
TI-2006-00421 Aliases CVE-2006-0435GHSA-rwxq-ghr2-v6c9

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7…

Priority MEDIUM 43Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.

Why it matters now

EPSS 0.06844 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*all versionsVulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:*1.0.2.0VulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:*1.0.2.1VulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*1.0.2.1sVulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*1.0.2.2VulnerableOracle
cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*1.0.2.2.2VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*9.0.2VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*9.0.2.0.0VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*9.0.2.0.1VulnerableOracle
  • cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2.0:*:*:*:*:*:*:* Versions 1.0.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2.1:*:*:*:*:*:*:* Versions 1.0.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:* Versions 1.0.2.1s Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:* Versions 1.0.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:* Versions 1.0.2.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:* Versions 9.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:* Versions 9.0.2.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:* Versions 9.0.2.0.1 Vulnerable ·Oracle
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*9.0.2.1VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*9.0.2.2VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*9.0.2.3VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*9.0.3VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*9.0.3.1VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*9.0.4.0VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*9.0.4.1VulnerableOracle
cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:*9.0.4.2VulnerableOracle
cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:*9.2.0.6VulnerableOracle
cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:*9.2.0.7VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*10.1.0.2VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:*10.1.0.3VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:*10.1.0.3.1VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:*10.1.0.4VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:*10.1.2VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:*10.1.2.0.2VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:*10.1.2.1.0VulnerableOracle
cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:*10.1.2_.0.1VulnerableOracle
cpe:2.3:a:oracle:http_server:1.0.2.0:*:*:*:*:*:*:*1.0.2.0VulnerableOracle
cpe:2.3:a:oracle:http_server:1.0.2.1:*:*:*:*:*:*:*1.0.2.1VulnerableOracle
cpe:2.3:a:oracle:http_server:1.0.2.1s_for_apps:*:*:*:*:*:*:*1.0.2.1s_for_appsVulnerableOracle
cpe:2.3:a:oracle:http_server:1.0.2.2:*:*:*:*:*:*:*1.0.2.2VulnerableOracle
cpe:2.3:a:oracle:http_server:1.0.2.2_roll_up_2:*:*:*:*:*:*:*1.0.2.2_roll_up_2VulnerableOracle
cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*8.1.7VulnerableOracle
cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*9.0.1VulnerableOracle
cpe:2.3:a:oracle:http_server:9.0.2:*:*:*:*:*:*:*9.0.2VulnerableOracle
cpe:2.3:a:oracle:http_server:9.0.2.3:*:*:*:*:*:*:*9.0.2.3VulnerableOracle
cpe:2.3:a:oracle:http_server:9.0.3.1:*:*:*:*:*:*:*9.0.3.1VulnerableOracle
cpe:2.3:a:oracle:http_server:9.1:*:*:*:*:*:*:*9.1VulnerableOracle
cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*9.2.0VulnerableOracle
  • cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:* Versions 9.0.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:* Versions 9.0.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:* Versions 9.0.2.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:* Versions 9.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:* Versions 9.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:* Versions 9.0.4.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:* Versions 9.0.4.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.0.4.2:*:*:*:*:*:*:* Versions 9.0.4.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.2.0.6:*:*:*:*:*:*:* Versions 9.2.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:9.2.0.7:*:*:*:*:*:*:* Versions 9.2.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:* Versions 10.1.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.0.3:*:*:*:*:*:*:* Versions 10.1.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.0.3.1:*:*:*:*:*:*:* Versions 10.1.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.0.4:*:*:*:*:*:*:* Versions 10.1.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.2:*:*:*:*:*:*:* Versions 10.1.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.2.0.2:*:*:*:*:*:*:* Versions 10.1.2.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.2.1.0:*:*:*:*:*:*:* Versions 10.1.2.1.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:application_server:10.1.2_.0.1:*:*:*:*:*:*:* Versions 10.1.2_.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:1.0.2.0:*:*:*:*:*:*:* Versions 1.0.2.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:1.0.2.1:*:*:*:*:*:*:* Versions 1.0.2.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:1.0.2.1s_for_apps:*:*:*:*:*:*:* Versions 1.0.2.1s_for_apps Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:1.0.2.2:*:*:*:*:*:*:* Versions 1.0.2.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:1.0.2.2_roll_up_2:*:*:*:*:*:*:* Versions 1.0.2.2_roll_up_2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:* Versions 8.1.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.0.2:*:*:*:*:*:*:* Versions 9.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.0.2.3:*:*:*:*:*:*:* Versions 9.0.2.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.0.3.1:*:*:*:*:*:*:* Versions 9.0.3.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:* Versions 9.2.0 Vulnerable ·Oracle

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-0435
  2. 2026-10-03 Alias added: GHSA-rwxq-ghr2-v6c9

References

Advisory 6

Other 6

  • TI-2002-00634 Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote… CVSS 2.0HIGH 7.5
  • TI-2002-00816 Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before… CVSS 2.0MEDIUM 6.8
  • TI-2020-01888 Segmentation fault in SSL_check_chain CVSS 3.1HIGH 7.5
  • TI-2006-00277 Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server… CVSS 2.0HIGH 10.0
  • TI-2006-00279 Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and… CVSS 2.0HIGH 10.0
  • TI-2005-01308 The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle… CVSS 2.0HIGH 7.5
See all 197 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences