Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle e-business suite 11.5.2 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2005-3457
Unspecified vulnerability in Oracle E-Business Suite and Applications 11.0 up to 11.5.10 has unknown impact and attack vectors, as identified by Oracle Vuln# APPS08 in HRMS.
Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle E-business Suite 11.0Oracle E-business Suite 11.5Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.9Oracle E-business Suite
10
CVSSv2
CVE-2005-3455
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5 up to 11.5.10 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in Application Install; (2) APPS02 and (3) APPS03 in Application Object Library; (4) APPS05 and (5)...
Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle E-business Suite 11.5.10Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.9Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8
10
CVSSv2
CVE-2004-0543
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 up to and including 11.5.8 allow remote malicious users to execute arbitrary SQL procedures and queries.
Oracle E-business Suite 11.5.6Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.3Oracle Applications 11.0Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.8Oracle E-business Suite 11iOracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5
7.2
CVSSv2
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
7.5
CVSSv2
CVE-2006-0552
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.
Oracle Application Server 10.1.2.0.0Oracle Application Server 10.1.2.0.1Oracle Application Server 9.0.4.2Oracle Collaboration Suite 10.1.1Oracle Developer Suite 9.0.2.1Oracle Developer Suite 9.0.4.1Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle10g Personal 10.1.0.3Oracle Oracle10g Personal 10.1.0.4Oracle Oracle8i Standard 8.0.6Oracle Oracle8i Standard 8.0.6.3Oracle Peoplesoft Enterprise Portal 8.4Oracle Peoplesoft Enterprise Portal 8.8Oracle 10g Enterprise Manager Grid Control 10.1 .0.4Oracle Application Server 1.0.2.2Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Database Server 8.0.6Oracle Database Server 8.0.6.3Oracle E-business Suite 11.5.10
9
CVSSv2
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
7.5
CVSSv2
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote malicious users to bypass access restrictions for certain procedures via an encoded URL w...
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.9Oracle Enterprise Manager 9Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle10g Standard 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0
4.6
CVSSv2
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Enterprise 8.1.6 .0.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 8.1.7Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Application Server
4.6
CVSSv2
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.3
4.4
CVSSv2
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain th...
Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle Enterprise Manager 9.0.1Oracle Enterprise Manager Database Control 10.1.2Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.1.7 .0.0Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Standard 8.1.7 .0.0Oracle Oracle8i Standard 8.1.7 .1Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Enterprise 9.2.0Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Personal 9.0.1.5Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.9
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook