Vulnerability in Oracle Application_server_portal
CVE-2006-6699
Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) c…
EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.
Affected products
- Oracle Application_server_portal — versions 9.0.2
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)