Oracle Diagnostics vulnerabilities

3 CVEs affecting Oracle Diagnostics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-1037, published 2006-03-07.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-1035, published 2006-03-07. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
• CVE-2006-1036, published 2006-03-07. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
• CVE-2006-1037, published 2006-03-07. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.