Privilege Escalation Vulnerability in Oracle 10g DBMS_Scheduler
CVE-2005-1496
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 11 May 2005
Badges
What is CVE-2005-1496?
The DBMS_Scheduler component in Oracle 10g contains a security flaw that allows remote attackers, who possess CREATE JOB privileges, to change their session user to the SYS user. This unauthorized privilege escalation can enable attackers to perform actions beyond their intended access level, posing a significant risk to database integrity and security. Proper configuration and access controls are essential to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
5% chance of being exploited in the next 30 days.
Timeline
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved