CVE-2005-3207: Oracle Forms

Medium severity, CVSS 5.0. EPSS: 19.8% chance of exploitation in the next 30 days.

The forms servlet (f90servlet) in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service (TNS listener stop) via a userid parameter that contains a STOP command.

Affected products

• Oracle Forms: version 4.5.10.22 only; version 5.0 only; version 6.0.8.25 only; version 6i only; version 9i only; version 10g only

Published 2005-10-14. Last modified 2026-06-16.