Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle enterprise manager database control 10.1.2 vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv2
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote malicious users to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
Oracle Database Server 8.1.7.4Oracle Application Server 9.0.2.1Oracle Application ServerOracle Database Server 9.0.1.5Oracle Application Server 9.0.2.0.0Oracle E-business Suite 11.5.5Oracle Enterprise Manager 9.0.1Oracle Database Server 9.0.4Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle Database Server 9.2.0.4Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.2Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle Database Server 10.1.0.2Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.1Oracle Enterprise Manager 9Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2
7.5
CVSSv2
CVE-2006-0552
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.
Oracle Application Server 10.1.2.0.0Oracle Application Server 10.1.2.0.1Oracle Application Server 9.0.4.2Oracle Collaboration Suite 10.1.1Oracle Developer Suite 9.0.2.1Oracle Developer Suite 9.0.4.1Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle Oracle10g Enterprise 10.1.0.4Oracle Oracle10g Personal 10.1.0.3Oracle Oracle10g Personal 10.1.0.4Oracle Oracle8i Standard 8.0.6Oracle Oracle8i Standard 8.0.6.3Oracle Peoplesoft Enterprise Portal 8.4Oracle Peoplesoft Enterprise Portal 8.8Oracle 10g Enterprise Manager Grid Control 10.1 .0.4Oracle Application Server 1.0.2.2Oracle Application Server 10.1.2.0.2Oracle Application Server 10.1.2.1.0Oracle Database Server 8.0.6Oracle Database Server 8.0.6.3Oracle E-business Suite 11.5.10
9
CVSSv2
CVE-2016-0635
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle...
Oracle Insurance Policy Administration J2ee 9.7.1Oracle Insurance Policy Administration J2ee 10.0.1Oracle Insurance Rules Palette 10.2.0Oracle Insurance Rules Palette 10.2.2Oracle Retail Integration Bus 15.0Oracle Insurance Policy Administration J2ee 9.6.1Oracle Insurance Rules Palette 10.0.1Oracle Insurance Rules Palette 10.1.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Health Sciences Information Manager 3.0.1.0Oracle Enterprise Manager Ops Center 12.1.4Oracle Retail Order Broker Cloud Service 15.0Oracle DocumakerOracle Insurance Policy Administration J2ee 10.2.2Oracle Insurance Rules Palette 9.6.1Oracle Insurance Rules Palette 9.7.1Oracle Primavera P6 Enterprise Project Portfolio Management 8.4Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Health Sciences Information Manager 1.2.8.3Oracle Health Sciences Information Manager 2.0.2.3Oracle Retail Order Broker Cloud Service 5.1
9
CVSSv2
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote malicious users to execute arbitrary code via a long token in the text of a wrapped procedure.
Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle Database Server 9i Application ServerOracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.2Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Oracle9i Standard 9.2.0.5
4.6
CVSSv2
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
Oracle Application ServerOracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 9.2.0.3
7.5
CVSSv2
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote malicious users to bypass access restrictions for certain procedures via an encoded URL w...
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.3.1Oracle Application Server 9.0.4Oracle E-business Suite 11.5.4Oracle E-business Suite 11.5.5Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.9Oracle Enterprise Manager 9Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle10g Standard 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0
4.6
CVSSv2
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.2.1Oracle Application Server 9.0.4.1Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.8Oracle E-business Suite 11.5.9Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle10g Personal 9.0.4 .0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Enterprise 8.1.6 .0.0Oracle Oracle8i Standard 8.1.5Oracle Oracle8i Standard 8.1.6Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.0.1Oracle Oracle9i Enterprise 9.2.0.5Oracle Oracle9i Personal 8.1.7Oracle Oracle9i Personal 9.2.0.3Oracle Oracle9i Personal 9.2.0.4Oracle Oracle9i Standard 9.0.1.4Oracle Oracle9i Standard 9.0.1.5Oracle Application Server
4.4
CVSSv2
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain th...
Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle Enterprise Manager 9.0.1Oracle Enterprise Manager Database Control 10.1.2Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0Oracle Oracle8i Enterprise 8.1.7 .0.0Oracle Oracle8i Enterprise 8.1.7 .1.0Oracle Oracle8i Standard 8.1.7 .0.0Oracle Oracle8i Standard 8.1.7 .1Oracle Oracle8i Standard 8.1.7 .4Oracle Oracle9i Enterprise 9.2.0Oracle Oracle9i Enterprise 9.2.0.1Oracle Oracle9i Personal 9.0.1.4Oracle Oracle9i Personal 9.0.1.5Oracle Application Server 9.0.2.2Oracle Application Server 9.0.2.3Oracle E-business Suite 11.5.1Oracle E-business Suite 11.5.2Oracle E-business Suite 11.5.9
7.8
CVSSv2
CVE-2004-1368
ISQL*Plus in Oracle 10g Application Server allows remote malicious users to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
Oracle Application ServerOracle Application Server 9.0.2Oracle Application Server 9.0.4Oracle Application Server 9.0.4.0Oracle E-business Suite 11.5.5Oracle E-business Suite 11.5.6Oracle Enterprise Manager Grid Control 10.1.0.2Oracle Oracle10g Enterprise 10.1.0.2Oracle Oracle8i Enterprise 8.0.6 .0.1Oracle Oracle8i Enterprise 8.1.5 .0.0Oracle Oracle8i Enterprise 8.1.7 .4Oracle Oracle8i Standard 8.0.6Oracle Application Server 9.0.2.3Oracle Application Server 9.0.3Oracle Application Server 9.0.3.1Oracle E-business Suite 11.5.3Oracle E-business Suite 11.5.4Oracle Enterprise Manager 9.0.1Oracle Enterprise Manager Database Control 10.1.2Oracle Oracle10g Standard 9.0.4 .0Oracle Oracle8i Enterprise 8.0.5 .0.0Oracle Oracle8i Enterprise 8.0.6 .0.0
5
CVSSv2
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote malicious users to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
Oracle Application Server 9.0.2.0.0Oracle Application Server 9.0.2.0.1Oracle Application Server 9.0.4.0Oracle Application Server 9.0.4.1Oracle E-business Suite 11.5.7Oracle E-business Suite 11.5.8Oracle Oracle10g Enterprise 9.0.4 .0Oracle Oracle10g Personal 10.1 .0.2Oracle Oracle8i Enterprise 8.1.5 .0.0Oracle Oracle8i Enterprise 8.1.5 .0.2Oracle Oracle8i Enterprise 8.1.5 .1.0Oracle Oracle8i Standard 8.0.6 .3Oracle Oracle8i Standard 8.1.5Oracle Oracle9i Client 9.2.0.2Oracle Oracle9i Enterprise 8.1.7Oracle Oracle9i Enterprise 9.2.0.3Oracle Oracle9i Enterprise 9.2.0.4Oracle Oracle9i Enterprise 9.2.0.5Oracle Application Server 9.0.2.1Oracle Application Server 9.0.2.2Oracle Collaboration Suite Release 1Oracle E-business Suite 11.5.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook