CVE-2006-5333: Oracle Database Server

High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors related to "create session" privileges, aka Vuln# DB02. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB02 is for SQL injection in the SDO_DROP_USER_BEFORE package using a Trigger for a DROP USER statement in an anonymous PL/SQL block.

Affected products

• Oracle Database Server: version 10.2.0.2 only

Published 2006-10-18. Last modified 2026-06-16.