VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2005· Updated Jun 16, 2026

CVE-2005-2372

CVE-2005-2372

Description

Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Oracle Corporation/Forms8 versions
    cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:oracle:forms:10g:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:6i:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:forms:9i:*:*:*:*:*:*:*
    • (no CPE)range: 4.5 - 10g

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.