// For flags

CVE-2004-1366

 

Severity Score

4.6
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-08-04 CVE Published
  • 2005-01-07 CVE Reserved
  • 2024-07-27 EPSS Updated
  • 2024-08-08 CVE Updated
  • 2024-08-08 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-255: Credentials Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
*-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2
Search vendor "Oracle" for product "Application Server" and version "9.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.0.0
Search vendor "Oracle" for product "Application Server" and version "9.0.2.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.0.1
Search vendor "Oracle" for product "Application Server" and version "9.0.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.1
Search vendor "Oracle" for product "Application Server" and version "9.0.2.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.2
Search vendor "Oracle" for product "Application Server" and version "9.0.2.2"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.3
Search vendor "Oracle" for product "Application Server" and version "9.0.2.3"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.3
Search vendor "Oracle" for product "Application Server" and version "9.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.3.1
Search vendor "Oracle" for product "Application Server" and version "9.0.3.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4
Search vendor "Oracle" for product "Application Server" and version "9.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4.0
Search vendor "Oracle" for product "Application Server" and version "9.0.4.0"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4.1
Search vendor "Oracle" for product "Application Server" and version "9.0.4.1"
-
Affected
Oracle
Search vendor "Oracle"
Collaboration Suite
Search vendor "Oracle" for product "Collaboration Suite"
release_1
Search vendor "Oracle" for product "Collaboration Suite" and version "release_1"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.1
Search vendor "Oracle" for product "E-business Suite" and version "11.5.1"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.2
Search vendor "Oracle" for product "E-business Suite" and version "11.5.2"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.3
Search vendor "Oracle" for product "E-business Suite" and version "11.5.3"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.4
Search vendor "Oracle" for product "E-business Suite" and version "11.5.4"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.5
Search vendor "Oracle" for product "E-business Suite" and version "11.5.5"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.6
Search vendor "Oracle" for product "E-business Suite" and version "11.5.6"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.7
Search vendor "Oracle" for product "E-business Suite" and version "11.5.7"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.8
Search vendor "Oracle" for product "E-business Suite" and version "11.5.8"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.9
Search vendor "Oracle" for product "E-business Suite" and version "11.5.9"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager
Search vendor "Oracle" for product "Enterprise Manager"
9
Search vendor "Oracle" for product "Enterprise Manager" and version "9"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager
Search vendor "Oracle" for product "Enterprise Manager"
9.0.1
Search vendor "Oracle" for product "Enterprise Manager" and version "9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager Database Control
Search vendor "Oracle" for product "Enterprise Manager Database Control"
10.1.2
Search vendor "Oracle" for product "Enterprise Manager Database Control" and version "10.1.2"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager Grid Control
Search vendor "Oracle" for product "Enterprise Manager Grid Control"
10.1.0.2
Search vendor "Oracle" for product "Enterprise Manager Grid Control" and version "10.1.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
enterprise_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "enterprise_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
enterprise_10.1.0.2
Search vendor "Oracle" for product "Oracle10g" and version "enterprise_10.1.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
personal_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "personal_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
personal_10.1_.0.2
Search vendor "Oracle" for product "Oracle10g" and version "personal_10.1_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
standard_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "standard_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
standard_10.1_.0.2
Search vendor "Oracle" for product "Oracle10g" and version "standard_10.1_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.5_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.5_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.6_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.6_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.6_.0.1
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.6_.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.0.2
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.6_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.6_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.4
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.0.6
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.0.6"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.0.6_.3
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.0.6_.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.5
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.6
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.6"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.1
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.4
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
client_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
client_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "personal_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "standard_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.3
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.5"
-
Affected