Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Oracle
Application Server

Oracle Application Server vulnerabilities

Known exploitedIn KEVPublic exploitFix available

oracle application server, oracle10g +1 moreBuffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in...CVE-2004-1774Public exploit7.2 HighAugust 31, 2004
oracle application server, collaboration suite, database server +7 more +9 moreStack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary...CVE-2004-1371EPSS 10.8%9.0 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreMultiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in...CVE-2004-13707.5 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreThe TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener...CVE-2004-13695.0 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via...CVE-2004-13687.8 HighAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreOracle 10g Database Server, when installed with a password that contains an exclamation point ("!...CVE-2004-13674.4 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreOracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world...CVE-2004-1366EPSS 15.5%4.6 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreExtproc in Oracle 9i and 10g does not require authentication to load a library or execute a...CVE-2004-13654.6 MediumAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreDirectory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to...CVE-2004-1364Public exploitEPSS 13.9%8.5 HighAugust 4, 2004
oracle application server, collaboration suite, database server +4 more +6 moreBuffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via...CVE-2004-13639.8 CriticalAugust 4, 2004
oracle application server, collaboration suite, e-business suite +6 more +8 moreThe PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the...CVE-2004-13627.5 HighAugust 4, 2004
oracle application server, application server portal, database server lite +2 more +4 moreThe (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix...CVE-2004-1707Public exploit7.2 HighJuly 30, 2004
oracle application server web cache, e-business suite +1 moreHeap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2...CVE-2004-0385EPSS 15.5%10.0 HighApril 16, 2004
oracle application server, http server +1 moreThe p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single...CVE-2004-18772.6 LowMarch 30, 2004
oracle application serverOracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows...CVE-2004-2134Public exploit4.6 MediumJanuary 28, 2004
oracle oracle9i, application server portal +1 moreMultiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3)...CVE-2003-11937.5 HighNovember 3, 2003
oracle sun one application serverSun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source...CVE-2003-0411Public exploitEPSS 25.1%7.5 HighJune 11, 2003
oracle application serverFormat string vulnerability in certain third party modifications to mod_dav for logging bad...CVE-2002-0842EPSS 14.6%7.5 HighMarch 3, 2003
oracle application serverCross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1)...CVE-2002-23474.3 MediumDecember 31, 2002
oracle application serverOracle 9i Application Server 9.0.2 stores the web cache administrator interface password in...CVE-2002-23457.5 HighDecember 31, 2002
oracle application serverFormat string vulnerability in the administrative pages of the PL/SQL module for Oracle...CVE-2002-21537.5 HighDecember 31, 2002
oracle application serverOracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows,...CVE-2002-18585.0 MediumDecember 31, 2002
oracle application serverCross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application...CVE-2002-16364.3 MediumDecember 31, 2002
oracle application serverThe Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location...CVE-2002-16355.0 MediumDecember 31, 2002
oracle application serverOracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to...CVE-2002-16326.4 MediumDecember 31, 2002
oracle application serverSQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS)...CVE-2002-16317.5 HighDecember 31, 2002
oracle application serverThe sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to...CVE-2002-16307.5 HighDecember 31, 2002
oracle application serverThe administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows...CVE-2002-0386Public exploitEPSS 22.0%5.0 MediumOctober 29, 2002
apache http server, oracle application server, database server +2 more +4 moreCross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43,...CVE-2002-0840Public exploitFix availableEPSS 95.1%6.8 MediumOctober 11, 2002
apache http server, oracle application server, database server +1 more +3 moreBuffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and...CVE-2002-0843EPSS 21.4%7.5 HighOctober 5, 2002
oracle reports, application server +1 moreBuffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used...CVE-2002-09477.5 HighOctober 4, 2002
oracle reports, application server +1 morerwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as...CVE-2002-1089Public exploit5.0 MediumAugust 31, 2002
openssl, apple mac os x, oracle application server +2 more +4 moreThe ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote...CVE-2002-0659Public exploitFix availableEPSS 36.2%5.0 MediumJuly 30, 2002
openssl, apple mac os x, oracle application server +2 more +4 moreBuffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote...CVE-2002-0656Public exploitFix availableEPSS 89.8%7.5 HighJuly 30, 2002
openssl, apple mac os x, oracle application server +2 more +4 moreOpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII...CVE-2002-0655Fix available7.5 HighJuly 30, 2002
oracle application serverOracle 9i Application Server allows remote attackers to bypass access restrictions for...CVE-2002-0569EPSS 18.9%7.5 HighJuly 3, 2002
oracle application server, oracle8i, oracle9i +2 moreOracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows...CVE-2002-0568EPSS 75.2%2.1 LowJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause...CVE-2002-05665.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle9i +2 moreOracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions...CVE-2002-05655.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass...CVE-2002-05647.5 HighJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreThe default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users...CVE-2002-0563EPSS 51.1%5.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle9i +2 moreThe default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP...CVE-2002-05625.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreThe default configuration of the PL/SQL Gateway web administration interface in Oracle 9i...CVE-2002-05617.5 HighJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 morePL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain...CVE-2002-05605.0 MediumJune 11, 2002
oracle application server, application server web cache, oracle8i +1 more +3 moreBuffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote...CVE-2002-0559EPSS 13.1%7.5 HighJune 11, 2002
oracle application server web cacheMultiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow...CVE-2002-164110.0 HighMay 27, 2002
oracle application server web cacheAn installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files...CVE-2002-01034.6 MediumMarch 15, 2002
oracle application server web cacheOracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a...CVE-2002-01025.0 MediumMarch 15, 2002
oracle application serverMultiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default...CVE-2002-16374.6 MediumFebruary 26, 2002
oracle application serverOracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file...CVE-2001-13725.0 MediumFebruary 6, 2002
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open