CVE-2005-3446: Oracle Application Server

High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.

Affected products

• Oracle Application Server: version 9.0.2.3 only; version 9.0.3.1 only; version 9.0.4.1 only; version 9.0.4.2 only; version 10.1.2.0.0 only
• Oracle Database Server: version 9.2.0.5 only; version 9.2.0.6 only

Published 2005-11-02. Last modified 2026-06-16.