SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/25259http://www.securityfocus.com/bid/16844http://www.integrigy.com/info/IntegrigySecurityAnalysis-OracleDiag0206.pdfhttp://secunia.com/advisories/19076