CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 9.0. It affects Oracle. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2006-5336
Severity
HIGH
CVSS
9
EPSS
3.13%
Oracle
Original NVD Description
Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impact and remote authenticated attack vectors related to (1) sys.dbms_cdc_ipublish (Vuln# DB05) and (2) sys.dbms_cdc_isubscribe (DB06). NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB05 is for SQL injection in CREATE_CHANGE_TABLE and CHANGE_TABLE_TRIGGER, and DB06 is for PL/SQL injection in the PREPARE_UNBOUNDED_VIEW procedure.