Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle application server 9.0.2.0.1 vulnerabilities and exploits

(subscribe to this query)
445
VMScore
CVE-2002-1858
Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 up to and including 9.0.2.0.1, when running on Windows, allows remote malicious users to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF direc...
Oracle Application Server 1.0.2.2Oracle Application Server 9.0.2Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1
668
VMScore
CVE-2002-1630
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote malicious users to send arbitrary emails.
Oracle Application Server 1.0.2.2Oracle Application Server 9.0.2.0.0Oracle Application Server 1.0.2Oracle Application Server 1.0.2.1sOracle Application Server 9.0.2.0.1
668
VMScore
CVE-2002-1631
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote malicious users to execute arbitrary code via the sql parameter.
Oracle Application Server 9.0.2.0.0Oracle Application Server 1.0.2Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 9.0.2.0.1
570
VMScore
CVE-2002-1632
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote malicious users to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 1.0.2Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1
465
VMScore
CVE-2004-2134
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
231
VMScore
CVE-2004-1877
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote malicious users to spoof the login page, which could allow users to inadvertently reveal their username an...
Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.2Oracle Http Server 8.1.7Oracle Http Server 9.0.1Oracle Application Server 1.0.2Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Http Server 9.2.0
668
VMScore
CVE-2003-1193
Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 up to and including 3.0.9.8.5 allow remote malicious users to execute arbitrary SQL commands...
Oracle Application Server Portal 3.0.9.8.5Oracle Application Server Portal 9.0.2.3Oracle Oracle9i 9.0.2.2Oracle Oracle9i 9.0.2.3Oracle Application Server Portal 9.0.2.3aOracle Application Server Portal 9.0.2.3bOracle Oracle9i 9.0.2Oracle Oracle9i 9.0.2.0.0Oracle Oracle9i 9.0.2.0.1Oracle Oracle9i 9.0.2.1
668
VMScore
CVE-2006-0435
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and ...
Oracle Application ServerOracle Application Server 1.0.2Oracle Application Server 10.1.0.3Oracle Application Server 10.1.0.3.1Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.2Oracle Application Server 9.2.0.6Oracle Http Server 8.1.7Oracle Http Server 9.0.1Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Http Server 1.0.2.1Oracle Http Server 1.0.2.1s For AppsOracle Http Server 9.0.3.1Oracle Http Server 9.1Oracle Application Server 1.0.2.0
490
VMScore
CVE-2008-4014
Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Oracle Application Server 1.0Oracle Application Server 7.0.4.4Oracle Application Server 10.1.4.0Oracle Application Server 9.0.2.0.1Oracle Application Server 1.0.2.2Oracle Application Server 9.2.0.7Oracle Application Server 10.1.2.1Oracle Application Server 10.1.3Oracle Application Server 10.1.3.1.0Oracle Application Server 9.0.4Oracle Application Server 10.2.0.0Oracle Application Server 1.0.2.0Oracle Application Server 3.0.7Oracle Application Server 9.0.4.3Oracle Application Server 10.1.2Oracle Application Server 10.1.2.0Oracle Application Server 10.1.2.3Oracle Application Server 6.0.8.26 Ps17Oracle Application Server 9.0.2.0.0Oracle Application Server 4.0.8.2Oracle Application Server 11iOracle Application Server 10.1.3.0
641
VMScore
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook