CVE-2007-0273: Oracle Database Server

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to XMLDB, aka DB06. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that DB06 is for multiple cross-site scripting (XSS) vulnerabilities.

Affected products

• Oracle Database Server: version 9.0.1.5 only; version 9.2.0.8 only; version 10.1.0.5 only; version 10.2.0.3 only

Published 2007-01-17. Last modified 2026-06-16.