CVE-2006-0435: Oracle Application Server

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.

Affected products

• Oracle Application Server: any version; version 1.0.2 only; version 1.0.2.0 only; version 1.0.2.1 only; version 1.0.2.1s only; version 1.0.2.2 only; …
• Oracle HTTP Server: version 1.0.2.0 only; version 1.0.2.1 only; version 1.0.2.1s_for_apps only; version 1.0.2.2 only; version 1.0.2.2_roll_up_2 only; version 8.1.7 only; …

Published 2006-01-26. Last modified 2026-06-16.