CVE-2005-1383

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application...

7.5 HighPublic exploit

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

Exploit likelihood

30.6%Up 20.7 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2005-1383
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-1383
Updated: 2026-11-02

EUVDEUVD-2005-1386 No score

Record: EUVD-2005-1386
Updated: 2026-11-03

GitHub AdvisoriesGHSA-98hh-xg99-pfj8 No score

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application...

Record: GHSA-98hh-xg99-pfj8
Updated: 2026-11-02

Affected products

oracle application server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass	2005-04-28

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1383 is a high vulnerability (CVSS 7.5) in Oracle Application Server, published May 2, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 30.6%, the 98th percentile. No source names a fixed version.