CVE-2005-1496: Oracle Application Server

Medium severity, CVSS 4.6. EPSS: 38.3% chance of exploitation in the next 30 days.

The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.

Affected products

• Oracle Application Server: version 10.1.0.2 only; version 10.1.0.3 only; version 10.1.0.3.1 only
• Oracle ORACLE10G: version enterprise_10.1.0.2 only; version enterprise_10.1.0.3 only; version enterprise_10.1.0.3.1 only; version personal_10.1.0.2 only; version personal_10.1.0.3 only; version personal_10.1.0.3.1 only; …

Published 2005-05-11. Last modified 2026-06-16.