Oracle Database Server Application Express Component Cross-Site Scripting Vulnerability (CNVD-2020-44292)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44293)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

The vulnerability of the Oracle Application Express component of the Oracle Database Server database management system allows a perpetrator to gain access to read, delete, and modify data, or to cause a service failure.

The vulnerability of the Oracle Application Express component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, delete, and modify access to data, or to cause a service failure using the network...

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

Design/Logic Flaw

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

CVE-2020-2514

CVE-2020-2514 affects the Oracle Application Express (APEX) component of Oracle Database Server , with affected versions before 19.2. The vulnerability allows a low-privileged End User with network access via HTTPS to compromise APEX, with exploitation requiring user interaction . Consequences st...

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

Oracle Database Server Multiple Vulnerabilities (Apr 2020 CPU)

The remote Oracle Database Server is missing the April 2020 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in the Oracle Multimedia component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable...

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

Design/Logic Flaw

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

CVE-2019-2484

CVE-2019-2484 affects Oracle Database Server’s Application Express component, specifically versions 5.1 and 18.2. The flaw allows a low-privileged attacker with a valid account and network access via HTTP to compromise Application Express, with human interaction required. Successful exploitation ...

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

Oracle Database Server Multiple Vulnerabilities (Jul 2019 CPU)

The remote Oracle Database Server is missing the July 2019 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability in the Spatial component of Oracle Database Server, which could allow an authenticated, remote attacker to cause a partial...

Oracle Database Server Application Express Component Access Control Error Vulnerability

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

Oracle Application Express AnyChart Flash-Based XSS (CVE-2018-2699)

A vulnerability exists in Oracle Application Express. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

apex-publish-static-files npm command injection vulnerability

apex-publish-static-files npm is a package that can upload static files from a local directory to Orcale APEX. A command injection vulnerability exists in apex-publish-static-files npm versions prior to 2.0.1. The vulnerability can be exploited to execute arbitrary shell commands with specially...

Oracle Application Express AnyChart Flash-Based Cross Site Scripting Vulnerability

Oracle Application Express versions prior to 5.1.4.00.08 suffer from a cross site scripting vulnerability. The vulnerability is located in the OracleAnyChart.swf file. User input passed through the "externalobjid" GET parameter is not properly sanitized before being passed to the...

Oracle Application Express AnyChart Flash-Based Cross Site Scripting

------------------------------------------------------------------------------------ Oracle Application Express AnyChart Flash-based Cross-Site Scripting Vulnerability ------------------------------------------------------------------------------------ - Software Link: https://apex.oracle.com/ -...