Design/Logic Flaw

Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, aka OID01...

CVE-2007-0287

Technical details are not publicly available in the provided documents for CVE-2007-0287; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2007-0288

Technical details of CVE-2007-0288 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are specified. Monitor for updates.

CVE-2007-0286

Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related to Containers for J2EE, aka OC4J07...

CVE-2007-0284

Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and attack vectors related to Oracle Containers for J2EE, aka 1 OC4J03 and 2 OC4J04...

Directory traversal

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2007-0222

CVE-2007-0222 is a directory traversal vulnerability in Oracle Application Server 10g (10.1.3.0.0) specifically in the EmChartBean server-side component. It allows remote, unauthenticated attackers to read arbitrary files outside the application root (likely via “..” in requests to the beanId par...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5352

Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln 1 APEX04, 2 APEX20, and 3 APEX21...

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

CVE-2006-5362

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln OC4J04...

CVE-2006-5363

Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln SSO02...

CVE-2006-5365

Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln FORM02...

CVE-2006-5351

Multiple unspecified vulnerabilities in Oracle Application Express formerly Oracle HTML DB 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln 1 APEX01, 2 APEX02, 3 APEX03, 4 APEX05, 5 APEX06, 6 APEX07, 7 APEX08, 8 APEX09, 9 APEX10, 10 APEX11, 11 APEX12, 12 APEX13, 13 APEX14, 14...

CVE-2006-5361

Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln OC4J03...

CVE-2006-5357

CVE-2006-5357 concerns an unspecified vulnerability in the Oracle HTTP Server component of Oracle Application Server (versions 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1.0) with unknown impact and remote attack vectors related to the PHP Module (aka Vuln# OHS03). The connected sources confirm this CVE entr...

CVE-2006-5365

Technical details for CVE-2006-5365 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates from official advisories.