CVE-2006-0551

N/A Unknown
Published: February 04, 2006 Modified: April 16, 2026
View on NVD

Description

SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB05, subsumed by CVE-2006-0260.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.kb.cert.org/vuls/id/983340
Source: cve@mitre.org
Patch Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA06-018A.html
Source: cve@mitre.org
Patch Third Party Advisory US Government Resource
http://www.kb.cert.org/vuls/id/983340
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory US Government Resource
http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.us-cert.gov/cas/techalerts/TA06-018A.html
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Third Party Advisory US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/24321
Source: af854a3a-2127-422b-91ae-364da2661108

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.5%
81th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

oracle