CVE-2005-1178: Oracle Forms

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.

Affected products

• Oracle Forms: version 3.0 only; version 4.5 only; version 5.0 only; version 6.0 only; version 6i only; version 9i only; …

Published 2005-05-02. Last modified 2026-06-16.