CVE-2006-5345: Oracle Database Server

High severity, CVSS 9.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.

Affected products

• Oracle Database Server: version 9.0.1.5 only; version 9.2.0.7 only; version 10.1.0.4 only

Published 2006-10-18. Last modified 2026-06-16.