Lucene search
+L

388 matches found

CNVD
CNVD
•added 2020/07/15 12:00 a.m.•24 views

Unspecified Vulnerability in Oracle Database Server Application Express Component (CNVD-2020-44293)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS8.9AI score0.00699EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•2 views

CVE-2020-2973: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.8AI score0.00688EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•6 views

CVE-2020-2976: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.8AI score0.00688EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•3 views

CVE-2020-2513: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.8AI score0.00661EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•4 views

CVE-2020-2974: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.8AI score0.00688EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•5 views

CVE-2020-2972: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affected are 5.1-19.2. Easily exploitable vulnerability allows low privileged attacker having SQL Workshop privilege with network access via HTTP to compromise Oracle Application...

5.4CVSS5.8AI score0.00661EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/21 12:00 a.m.•14 views

The vulnerability of the Oracle Application Express component of the Oracle Database Server database management system allows a perpetrator to gain access to read, delete, and modify data, or to cause a service failure.

The vulnerability of the Oracle Application Express component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, delete, and modify access to data, or to cause a service failure using the network...

4.9CVSS5.8AI score0.00749EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2020/04/15 2:15 p.m.•40 views

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

4.9CVSS3.7AI score0.00749EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/15 2:15 p.m.•16 views

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

4.6CVSS6.1AI score0.00749EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/15 2:15 p.m.•25 views

Design/Logic Flaw

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

4.9CVSS4AI score0.00749EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/15 1:29 p.m.•95 views

CVE-2020-2514

CVE-2020-2514 affects the Oracle Application Express (APEX) component of Oracle Database Server , with affected versions before 19.2. The vulnerability allows a low-privileged End User with network access via HTTPS to compromise APEX, with exploitation requiring user interaction . Consequences st...

4.9CVSS4AI score0.00749EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/15 1:29 p.m.•39 views

CVE-2020-2514

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

4.6CVSS4.3AI score0.00749EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•377 views

Oracle Database Server Multiple Vulnerabilities (Apr 2020 CPU)

The remote Oracle Database Server is missing the April 2020 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - Vulnerability in the Oracle Multimedia component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable...

8CVSS6.5AI score0.2258EPSS
SaveExploits2References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•4 views

CVE-2020-2514: Undefined Security Weakness

Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...

4.9CVSS6AI score0.00749EPSS
SaveExploits0References1
OSV
OSV
•added 2019/07/23 11:15 p.m.•21 views

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

5.4CVSS5.8AI score0.0074EPSS
SaveExploits0References1
NVD
NVD
•added 2019/07/23 11:15 p.m.•28 views

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

5.4CVSS4.3AI score0.0074EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/23 11:15 p.m.•26 views

Design/Logic Flaw

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

4.9CVSS4.7AI score0.0074EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/07/23 10:31 p.m.•91 views

CVE-2019-2484

CVE-2019-2484 affects Oracle Database Server’s Application Express component, specifically versions 5.1 and 18.2. The flaw allows a low-privileged attacker with a valid account and network access via HTTP to compromise Application Express, with human interaction required. Successful exploitation ...

5.4CVSS5.1AI score0.0074EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/07/23 10:31 p.m.•37 views

CVE-2019-2484

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

5.3AI score0.0074EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/23 12:00 a.m.•4 views

CVE-2019-2484: Undefined Security Weakness

Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Valid Account privilege with network access via HTTP to compromise Application Express...

5.4CVSS7.1AI score0.0074EPSS
SaveExploits0References1
Rows per page
Query Builder