Vulnerability in Oracle Applications

CVE-2003-0632

Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL.

EPSS: 0.047 (90.8th percentile) — read the EPSS interpretation.

Affected products

Oracle Applications — versions 10.7, 11.0
Oracle E-business_suite — versions 11.1, 11.2, 11.3
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)