CVE-2004-1368
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via...
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
Exploit likelihood
What each source reports
NVD Score used
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- Record
CVE-2004-1368- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
CVE List No score
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- Record
CVE-2004-1368- Updated
- 2026-11-02
EUVDEUVD-2004-1365 No score
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- Record
EUVD-2004-1365- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5q2v-98f2-hvgp No score
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via...
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
- Record
GHSA-5q2v-98f2-hvgp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1368 is a high vulnerability (CVSS 7.8) in Oracle Application Server, published August 4, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.56%, the 92nd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/18656
marc.info?l=bugtraq&m=110382264415387&w=2
ngssoftware.com/advisories/oracle23122004E.txt
kb.cert.org/vuls/id/435974
us-cert.gov/cas/techalerts/TA04-245A.html
securityfocus.com/bid/10871
sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1
nvd.nist.gov/vuln/detail/CVE-2004-1368
github.com/advisories/GHSA-5q2v-98f2-hvgp