CVE-2005-2294: Oracle Forms

Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.

Affected products

• Oracle Forms: version 4.5 only; version 6.0 only; version 6i only; version 9i only

Published 2005-07-18. Last modified 2026-06-16.