CVE-2013-1517

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect confidentiality via unknown vectors related to Diagnostics...

Oracle Application Express (Apex) CVE-2012-1708

An unspecified vulnerability in versions 4.0 and 4.1 of the Application Express Apex component of the Oracle Database Server allows remote attackers to affect integrity via unpublished vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012...

Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)

There are unspecified vulnerabilities in versions prior to version 2.2.1 of the Oracle Application Express component of the Oracle Database. The updated version of Apex contains '35 new security fixes for Oracle Application Express, 25 of which may be remotely exploitable without authentication'...

Oracle Application Express (Apex) Version Detection

The remote host is running Oracle Application Express Apex. -------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detect Oracle Application Express Version on Apex/HTTP ports Version 1.0...

Oracle Application Express (Apex) Unspecified Issues (pre 3.1)

There are unspecified vulnerabilities in the Application Express component of the Oracle Database. The updated version 3.1 contains two security fixes for vulnerabilities of which one is remotely exploitable without authentication...

Oracle Application Express (Apex) Detection

The remote host is running Oracle Application Express Apex. ---------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Oracle Application Express Detection on HTTP ports Version 1.1 ---------------------------------------------------- include"compat.inc"; if...

Oracle Application Express (Apex) CVE-2008-4005

An unspecified vulnerability in the Oracle Application Express component of Oracle Database version 11.1.0.6 allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...

Oracle Application Express (Apex) CVE-2009-1993

There is an unspecified vulnerability in Oracle Application Express. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detection script for multiple issues within Oracle Application Express 3.0.1 1 new security fix for...

Oracle Application Express (Apex) Unspecified Issues (pre 3.0.1)

There are unspecified vulnerabilities in versions prior to version 3.0.1 of the Oracle Application Express component of the Oracle Database. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Detection script for multiple...

Oracle Application Express (Apex) CVE-2010-0076

An unspecified vulnerability in version 3.2.1 of the Application Express Application Builder component of Oracle Database allows remote, authenticated users to affect confidentiality, integrity, and availability via unpublished vectors...

Oracle Application Express (Apex) Administration Interface is Accessible

In production environments, the Apex Administration and Builder applications should be disabled to prevent administrator or developer access to the instance via a web browser. ------------------------------------------------------------------- c Recx Ltd 2009-2012 http://www.recx.co.uk/ Look for...

Oracle Application Framework Diagnostic Mode Bypass Vulnerability

Exploit for jsp platform in category web applications Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected: 11.5.10.2, 12.0.6, 12.1.3 Product description: The Oracle...

Oracle Application Framework - Diagnostic Mode Bypass

Oracle Application Framework - Diagnostic Mode Bypass Trustwave SpiderLabs Security Advisory TWSL2012-023: Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected:...

Oracle Application Framework Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023: Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected: 11.5.10.2, 12.0.6, 12.1.3 Product description: The Oracle...

Oracle Application Framework - Diagnostic Mode Bypass

Trustwave SpiderLabs Security Advisory TWSL2012-023: Oracle Application Framework Diagnostic Mode Bypass Vulnerability Published: 1/15/2013 Version: 1.0 Vendor: Oracle www.oracle.com Product: Oracle Application Framework Version affected: 11.5.10.2, 12.0.6, 12.1.3 Product description: The Oracle...

PT-2012-4537 · Oracle · Oracle Application Server Single Sign-On

Name of the Vulnerable Software and Affected Versions: Oracle Application Server Single Sign-On version 10.1.4.3.0 Description: The issue affects the integrity of the system, related to Redirects. Recommendations: For version 10.1.4.3.0, at the moment, there is no information about a newer versio...

CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175...

Oracle Identity Management 10g Cross Site Scripting

Oracle Identity Management 10g username XSS POST Injection Vulnerability form name="XSS" method="P...

CVE-2012-1740

Unspecified vulnerability in the Oracle Application Express Listener component in Oracle Application Express Listener 1.1-ea, 1.1.1, 1.1.2, and 1.1.3 allows remote attackers to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors related to Attachments / File Upload...