Description
Unspecified vulnerability in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to XMLDB, aka DB06. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that DB06 is for multiple cross-site scripting (XSS) vulnerabilities.
Remediation
References
Related Vulnerabilities
MediaWiki Insecure Storage of Sensitive Information Vulnerability (CVE-2021-36127)
Envoy Proxy Improper Input Validation Vulnerability (CVE-2019-9900)
WordPress Plugin Teamleader CRM Forms Cross-Site Scripting (2.0.0)
Jboss EAP Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2025-5731)