AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2006-5344

HIGH · CVSS 9 EPSS 3.98%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-10-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.0. It affects Oracle. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2006-5344
Severity
HIGH
CVSS
9
EPSS
3.98%
Oracle

Original NVD Description

Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_3gl, aka Vuln# DB20, and (2) mdsys.sdo_cs, aka DB21. NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB20 is a buffer overflow in GEOM_OPERATION, and DB21 is related to a buffer overflow and SQL injection in TRANSFORM_LAYER.