Oracle Application Express vulnerabilities

• oracle application express Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). ... CVE-2025-50067 9.0 CriticalJuly 15, 2025
• oracle application express Vulnerability in Oracle Application Express (component: General). Supported versions that are... CVE-2025-21557 5.4 MediumJanuary 21, 2025
• oracle application express Vulnerability in Oracle Application Express (component: General). Supported versions that are... CVE-2024-21261 4.9 MediumOctober 15, 2024
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Application Express Administration product of Oracle Application Express ... CVE-2023-21983 5.6 MediumJuly 18, 2023
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Application Express Customers Plugin product of Oracle Application Express ... CVE-2023-21975 9.0 CriticalJuly 18, 2023
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application... CVE-2023-21974 9.0 CriticalJuly 18, 2023
• ckeditor, ckeditor ckeditor4, drupal +7 more +9 more Regular expression Denial of Service in dialog plugin CVE-2022-24729 Fix available 6.5 MediumMarch 16, 2022
• ckeditor, ckeditor ckeditor4, drupal +7 more +9 more Cross-site Scripting in CKEditor4 CVE-2022-24728 Fix available 5.4 MediumMarch 16, 2022
• ckeditor, ckeditor ckeditor4, drupal +7 more +9 more HTML comments vulnerability allowing to execute JavaScript code CVE-2021-41165 Fix available 8.2 HighNovember 17, 2021
• ckeditor, ckeditor ckeditor4, drupal +8 more +10 more Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML CVE-2021-41164 Fix available 8.2 HighNovember 17, 2021
• jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 more XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• ckeditor, ckeditor ckeditor4, debian linux +10 more +12 more Execution of JavaScript code using malformed HTML in ckeditor CVE-2021-37695 Fix available 7.3 HighAugust 12, 2021
• ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 more Arbitrary HTML injection vulnerability in ckeditor CVE-2021-32809 Fix available 4.6 MediumAugust 12, 2021
• ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 more Cross-site scripting in ckeditor via abuse of undo functionality CVE-2021-32808 Fix available 7.6 HighAugust 12, 2021
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server... CVE-2021-2460 5.4 MediumJuly 20, 2021
• prismjs prism, oracle application express +1 more Regular Expression Denial of Service (ReDoS) in Prism CVE-2021-32723 Fix available 7.4 HighJune 28, 2021
• ckeditor, oracle agile product lifecycle management, application express +7 more +9 more Inclusion of Functionality from Untrusted Control Sphere in CKEditor 4 CVE-2021-26272 Fix available 6.5 MediumJanuary 26, 2021
• ckeditor, oracle agile product lifecycle management, application express +4 more +6 more CKEditor 4 ReDoS Vulnerability CVE-2021-26271 Fix available 6.5 MediumJanuary 26, 2021
• oracle application express survey builder, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database... CVE-2021-2117 5.4 MediumJanuary 20, 2021
• oracle application express opportunity tracker, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database... CVE-2021-2116 5.4 MediumJanuary 20, 2021
• ckeditor, oracle agile product lifecycle management, application express +6 more +8 more Improper Neutralization of Input During Web Page Generation in CKEditor4 CVE-2020-27193 Fix available 6.1 MediumNovember 12, 2020
• codemirror, oracle application express, enterprise manager express user interface +3 more +5 more Regular Expression Denial of Service (ReDoS) CVE-2020-7760 Fix available 5.3 MediumOctober 30, 2020
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database... CVE-2020-14900 5.4 MediumOctober 21, 2020
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server... CVE-2020-14899 5.4 MediumOctober 21, 2020
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server... CVE-2020-14898 5.4 MediumOctober 21, 2020
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server.... CVE-2020-14763 5.4 MediumOctober 21, 2020
• oracle application express, oracle corporation application express (apex) +1 more Vulnerability in the Oracle Application Express component of Oracle Database Server. The... CVE-2020-14762 5.4 MediumOctober 21, 2020
• cure53 dompurify, debian linux, microsoft visual studio 2017 +2 more +4 more Cross-site Scripting in dompurify CVE-2020-26870 Fix available 6.1 MediumOctober 7, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2977 4.6 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2976 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2975 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2974 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2973 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2972 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2971 5.4 MediumJuly 15, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported... CVE-2020-2513 5.4 MediumJuly 15, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• oracle application express Vulnerability in the Oracle Application Express component of Oracle Database Server. The... CVE-2020-2514 4.6 MediumApril 15, 2020
• ckeditor, drupal, fedoraproject fedora +8 more +10 more CKEditor 4.0 vulnerability in the HTML Data Processor CVE-2020-9281 Fix available 6.1 MediumMarch 7, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• oracle application express Vulnerability in the Application Express component of Oracle Database Server. The supported... CVE-2018-2699 6.1 MediumJanuary 18, 2018
• jqueryui jquery ui, debian linux, fedoraproject fedora +10 more +12 more jQuery-UI vulnerable to Cross-site Scripting in dialog closeText CVE-2016-7103 Fix available EPSS 29.2% 6.1 MediumMarch 15, 2017
• oracle application express Unspecified vulnerability in the Application Express component in Oracle Database Server before 5... CVE-2016-3467 5.8 MediumJuly 21, 2016
• oracle application express Unspecified vulnerability in the Application Express component in Oracle Database Server before 5... CVE-2016-3448 6.1 MediumJuly 21, 2016
• oracle application express listener Unspecified vulnerability in the Oracle Application Express Listener component in Oracle... CVE-2012-1740 7.8 HighJuly 17, 2012
• oracle application express Unspecified vulnerability in the Oracle Application Express component in Oracle Application... CVE-2008-1822 10.0 HighApril 16, 2008
• oracle application express Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote... CVE-2008-1811 5.5 MediumApril 16, 2008