Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
oracle application server vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2002-1630
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote malicious users to send arbitrary emails.
Oracle Application Server 1.0.2.2
Oracle Application Server 9.0.2.0.0
Oracle Application Server 1.0.2
Oracle Application Server 1.0.2.1s
Oracle Application Server 9.0.2.0.1
7.5
CVSSv2
CVE-2002-1631
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote malicious users to execute arbitrary code via the sql parameter.
Oracle Application Server 9.0.2.0.0
Oracle Application Server 1.0.2
Oracle Application Server 1.0.2.1s
Oracle Application Server 1.0.2.2
Oracle Application Server 9.0.2.0.1
6.4
CVSSv2
CVE-2002-1632
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote malicious users to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Oracle Application Server 1.0.2.1s
Oracle Application Server 1.0.2.2
Oracle Application Server 1.0.2
Oracle Application Server 9.0.2.0.0
Oracle Application Server 9.0.2.0.1
10
CVSSv2
CVE-2006-3708
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
Oracle Application Server 10.1.2.0.1
Oracle Application Server 10.1.2.0.2
Oracle Application Server 9.0.2.3
Oracle Application Server 9.0.3.1
Oracle Application Server 9.0.4.2
10
CVSSv2
CVE-2005-3445
Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB30 and AS03 or (2) DB31 and AS05.
Oracle Application Server 10.1.2.0.0
Oracle Application Server 10.1.2.0.1
Oracle Application Server 9.0.3.1
Oracle Application Server 9.0.4.1
Oracle Database Server 9.2.0.6
Oracle Database Server 9.2.0.7
Oracle Application Server 1.0.2.2
Oracle Application Server 9.0.4.2
Oracle Database Server 10.1.0.3
Oracle Application Server 10.1.2.0.2
Oracle Application Server 9.0.2.3
Oracle Database Server 8.1.7.4
Oracle Database Server 9.2.0.5
Oracle Database Server 10.1.0.4
Oracle Database Server 10.1.0.4.2
10
CVSSv2
CVE-2005-3446
Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.
Oracle Database Server 9.2.0.6
Oracle Application Server 10.1.2.0.0
Oracle Application Server 9.0.2.3
Oracle Application Server 9.0.4.2
Oracle Database Server 9.2.0.5
Oracle Application Server 9.0.3.1
Oracle Application Server 9.0.4.1
4.3
CVSSv2
CVE-2008-2612
Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors.
Oracle Hyperion Bi Plus Component
Oracle Oracle Application Server 8.3.2.4
Oracle Oracle Application Server 8.5.0.3
Oracle Oracle Application Server 9.3.1.0
Oracle Oracle Application Server 9.2.0.3
Oracle Oracle Application Server 9.2.1.0
10
CVSSv2
CVE-2005-3450
Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
Oracle Application Server 1.0
Oracle Application Server 1.0.2.2
Oracle Application Server 9.0.2.3
Oracle Application Server 9.0.3.1
5
CVSSv2
CVE-2002-1858
Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 up to and including 9.0.2.0.1, when running on Windows, allows remote malicious users to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF direc...
Oracle Application Server 1.0.2.2
Oracle Application Server 9.0.2
Oracle Application Server 9.0.2.0.0
Oracle Application Server 9.0.2.0.1
7.5
CVSSv2
CVE-2005-1383
The OHS component 1.0.2 up to and including 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote malicious users to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
Oracle Application Server 10.1.0.2
Oracle Application Server 10.1.0.3
Oracle Application Server 10.1.0.3.1
Oracle Application Server 10.1.2
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »