Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_server | Oracle | 9.0.4.2 (including) | 9.0.4.2 (including) |