Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle application server 9.0.3 vulnerabilities and exploits

(subscribe to this query)
4.6
CVSSv2
CVE-2004-2134
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
2.6
CVSSv2
CVE-2004-1877
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote malicious users to spoof the login page, which could allow users to inadvertently reveal their username an...
Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.2Oracle Http Server 8.1.7Oracle Http Server 9.0.1Oracle Application Server 1.0.2Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Http Server 9.2.0
5
CVSSv2
CVE-2004-2244
The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and previous versions, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote malicious users to cause a denial of service (CPU and memory consumptio...
Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.2Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Standard 9.2.0.2Oracle Application Server 1.0.2.2Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2
7.5
CVSSv2
CVE-2006-0435
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and ...
Oracle Application ServerOracle Application Server 1.0.2Oracle Application Server 10.1.0.3Oracle Application Server 10.1.0.3.1Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.2Oracle Application Server 9.2.0.6Oracle Http Server 8.1.7Oracle Http Server 9.0.1Oracle Application Server 1.0.2.1sOracle Application Server 1.0.2.2Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle Http Server 1.0.2.1Oracle Http Server 1.0.2.1s For AppsOracle Http Server 9.0.3.1Oracle Http Server 9.1Oracle Application Server 1.0.2.0
5.5
CVSSv2
CVE-2008-4014
Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via unknown vectors.
Oracle Application Server 1.0Oracle Application Server 7.0.4.4Oracle Application Server 10.1.4.0Oracle Application Server 9.0.2.0.1Oracle Application Server 1.0.2.2Oracle Application Server 9.2.0.7Oracle Application Server 10.1.2.1Oracle Application Server 10.1.3Oracle Application Server 10.1.3.1.0Oracle Application Server 9.0.4Oracle Application Server 10.2.0.0Oracle Application Server 1.0.2.0Oracle Application Server 3.0.7Oracle Application Server 9.0.4.3Oracle Application Server 10.1.2Oracle Application Server 10.1.2.0Oracle Application Server 10.1.2.3Oracle Application Server 6.0.8.26 Ps17Oracle Application Server 9.0.2.0.0Oracle Application Server 4.0.8.2Oracle Application Server 11iOracle Application Server 10.1.3.0
7.2
CVSSv2
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
7.2
CVSSv2
CVE-2004-1707
The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libc...
Oracle Application Server 1.0.2.2.2Oracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server Portal 3.0.9.8.5Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Standard 8.0.6Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Client 9.2.0.1Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.0.2Oracle Application ServerOracle Application Server 1.0.2Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Application Server Portal 9.0.2.3b
4.3
CVSSv2
CVE-2005-3204
Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote malicious users to inject arbitrary web script or HTML via the query string in an HTTP request.
Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Oracle9i Enterprise 9.0.1.4Oracle Oracle9i Enterprise 9.0.1.5Oracle Oracle9i Enterprise 9.0.1.5 FipsOracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Enterprise 9.2.0.6Oracle Oracle9i Personal 9.2.0.1Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Standard 9.0.1.2Oracle Oracle9i Standard 9.0.1.3Oracle Oracle9i Standard 9.0.1.4Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Oracle9i Developer 9.0.4Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Personal 9.0.4Oracle Oracle9i Personal 9.2Oracle Oracle9i Standard 9.0Oracle Oracle9i Standard 9.0.1
9
CVSSv2
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
5
CVSSv2
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote malicious users to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Enterprise 9.0.4 .0Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .0.0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Client 9.2.0.2Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook