CVE-2005-2294
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an...
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
Exploit likelihood
What each source reports
NVD Score used
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
- Record
CVE-2005-2294- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
- Record
CVE-2005-2294- Updated
- 2026-11-02
EUVDEUVD-2005-2295 No score
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
- Record
EUVD-2005-2295- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7fj6-cw4m-wqw7 No score
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an...
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
- Record
GHSA-7fj6-cw4m-wqw7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2294 is a low vulnerability (CVSS 2.1) in Oracle Forms, published July 17, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.
References
red-database-security.com/advisory/oracle_forms_unsecure_temp_file_handling.html
marc.info?l=bugtraq&m=112129398711846&w=2
secunia.com/advisories/15991
exchange.xforce.ibmcloud.com/vulnerabilities/21347
oracle.com/technology/deploy/security/pdf/cpujul2005.html
nvd.nist.gov/vuln/detail/CVE-2005-2294
github.com/advisories/GHSA-7fj6-cw4m-wqw7