Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

application server 10g vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2006-6697
CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and previous versions, including 9.0.2, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.
Oracle Application Server Portal 10gOracle Application Server Portal 9.0.2
5
CVSSv2
CVE-2008-2138
Oracle Application Server (OracleAS) Portal 10g allows remote malicious users to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing "%0A" (encoded line feed), then using the session ID that is gene...
Oracle Application Server Portal 10g
10
CVSSv2
CVE-2005-3460
Unspecified vulnerability in Oracle Agent in Oracle Enterprise Manager 9.0.4.1 up to 10.1.0.4 has unknown impact and attack vectors, as identified by Oracle Vuln# EM01.
Oracle Enterprise Manager Application Server Control 9.0.4.1Oracle Enterprise Manager Application Server Control 9.0.4.2Oracle 10g Enterprise Manager Database Control 10.1.0.3Oracle 10g Enterprise Manager Database Control 10.1.0.4
7.5
CVSSv2
CVE-2006-0586
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote malicious users to execute arbitrary SQL commands via multiple parameters in (1) ATTACH_JOB, (2) HAS_PRIVS, and (3) OPEN_JOB functions in the SYS.KUPV$FT package; and (4) UPDATE_JOB, (...
Oracle Oracle10g Personal 10.1.0.3Oracle Application Server 10.1.2.0.2Oracle Oracle10g Standard 10.1.0.3.1Oracle Application Server 10.1.2.1.0Oracle Application Server 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle10g Enterprise 10.1.0.3Oracle Oracle10g Enterprise 10.1.0.3.1Oracle Oracle10g Standard 10.1.0.2Oracle Oracle10g Standard 10.1.0.4Oracle Application Server 10.1.2.0.1Oracle Oracle10g Personal 10.1.0.2Oracle Oracle10g Standard 10.1.0.3Oracle Oracle10g Standard 10.1.0.5Oracle Oracle10g Personal 10.10.3.1Oracle Application Server 10.1.0.4Oracle Oracle10g Enterprise 10.1.0.2Oracle Application Server 10.1.0.2Oracle Oracle10g Standard 10.1.0.4.2Oracle Application Server 10.1.0.3.1Oracle Application Server 10.1.2Oracle Oracle10g Personal 10.1.0.4
4.3
CVSSv2
CVE-2007-1506
Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote malicious users to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.
Oracle Application Server Portal
10
CVSSv2
CVE-2006-0287
Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
Oracle Database Server 10.1.0.5Oracle Application Server 10.1.2.0.2
10
CVSSv2
CVE-2006-1884
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
Oracle Application Server 10.1.2.0.0Oracle Application Server 10.1.2.0.1Oracle Collaboration Suite 10g Release 1 10.1.1Oracle Collaboration Suite 10g Release 1 10.1.2.0Oracle Database Server 8.1.7.4Oracle Database Server 9.0.1.4Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.10Oracle Peoplesoft Enterprise Tools 8.46Oracle Peoplesoft Enterprise Tools 8.47.04Jdedwards Enterpriseone Tools 8.95Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Collaboration Suite 10g Release 1 10.1.2.1Oracle Database Server 10.2.0.1Oracle Database Server 9.0.1.5Oracle Database Server 9.2.0.6Oracle E-business Suite 11.5.10.1Oracle E-business Suite 11.5.10.2Oracle Peoplesoft Enterprise Tools 8.47Oracle Pharmaceutical 4.5.0Oneworld Oneworld Tools 8.95.j1
7.2
CVSSv2
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
5
CVSSv2
CVE-2008-2595
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on r...
Oracle Database 10g 10.1.2.3Oracle Database 10g 10.1.4.2Oracle Database 9i 9.0.4.3
10
CVSSv2
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote malicious users to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle ad...
Oracle Application Server Web Cache 9.0.0.4.0Oracle Application Server Web Cache 9.0.2.3.0Oracle Application Server Web Cache 9.0.3.1.0Oracle Application Server Web Cache 9.0.4.0.0Oracle E-business Suite 11i
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook