CVE-2005-0298: Oracle Database Server

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information.

Affected products

• Oracle Database Server: version 8.0.6 only; version 8.0.6.3 only; version 8.1.7.4 only; version 9.0.1.4 only; version 9.0.1.5 only; version 9.0.4 only; …

Published 2005-05-02. Last modified 2026-06-16.