CVE-2007-5766: Oracle E-Business Suite

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: this is probably the same issue as CVE-2007-5527 or CVE-2007-5528, but there are insufficient details to be sure.

Affected products

• Oracle E-Business Suite: version 11i only; version 12 only

Published 2007-11-08. Last modified 2026-06-16.