CVE-2004-0543: Critical – Multiple SQL injection vulnerabilities in Oracle Applications 11.0

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2004. A critical vulnerability affects Oracle systems (CVE-2004-0543). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2004-GLOBAL-007970-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2004-0543?

This vulnerability was disclosed in 2004. A critical vulnerability affects Oracle systems (CVE-2004-0543). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2004-0543?

CVE-2004-0543 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 7.0%.

Is CVE-2004-0543 actively exploited?

No confirmed active exploitation of CVE-2004-0543 as of 2026-09-25.

How do I remediate CVE-2004-0543?

Priority: MEDIUM. PSIRT: [email protected]

What systems are affected by CVE-2004-0543?

CVE-2004-0543 affects Oracle E-Business Suite, Applications, E-Business Suite 12.

Vulnerability Details

CVE ID	`CVE-2004-0543`
BSID	`BS-2004-GLOBAL-007970-C` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:C/I:C/A:C`
Published	2004-08-06
Last Modified	2026-06-16
ICS Relevance	0%
Source	NVD

Official Description

Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products

Vendor	Product	Affected Versions
Oracle	E-Business Suite	`11.5.1` `11.5.2` `11.5.3` `11.5.4` `11.5.5` `11.5.6` +3 more `11.5.7` `11.5.8` `11i`
Oracle	Applications	`11.0`
Oracle	E-Business Suite 12	`11.5.1` `11.5.2` `11.5.3` `11.5.4` `11.5.5` `11.5.6` +3 more `11.5.7` `11.5.8` `11i`

Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 8106 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`8c627bb9801d1a1f3e8d840ef74f1d4a1f78b0e2402e44e3e74e8b24ea9fc1d8fb3f3f0294cc2c474b1a045c155a1dc326a3f701c6f75469761d447ffed81236`

Related CVEs affecting Oracle

CVE-2015-4881 10.0 Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java S... CVE-2026-47056 10.0 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middlewa... CVE-2018-2611 10.0 Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle S... CVE-2026-60217 10.0 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (co... CVE-2007-2121 10.0 Unspecified vulnerability in the COREid Access component in Oracle Applicatio...

View all Oracle CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →