CVE-2007-0222: Undefined Security Weakness

Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably ".." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5599

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Oracle Application Express formerly HTML DB before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWVFLOWITEMHELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle...

CVE-2006-5365

Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln FORM02...

CVE-2006-5352

Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln 1 APEX04, 2 APEX20, and 3 APEX21...

CVE-2006-5361

Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln OC4J03...

CVE-2006-5363

Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln SSO02...

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...

CVE-2006-5351

Multiple unspecified vulnerabilities in Oracle Application Express formerly Oracle HTML DB 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln 1 APEX01, 2 APEX02, 3 APEX03, 4 APEX05, 5 APEX06, 6 APEX07, 7 APEX08, 8 APEX09, 9 APEX10, 10 APEX11, 11 APEX12, 12 APEX13, 13 APEX14, 14...

CVE-2006-5362

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln OC4J04...

CVE-2006-5358

Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln FORM01...

CVE-2006-5364

Technical details for CVE-2006-5364 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2006-5360

Technical details for CVE-2006-5360 are not publicly available in the provided documents. Monitor for updates; no further specifics (impact, vectors, or remediation) can be stated from these sources.

CVE-2006-5362

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln OC4J04...

CVE-2006-5362

Technical details for CVE-2006-5362 are not provided in the supplied documents. No product/version specifics, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2006-5357

CVE-2006-5357 concerns an unspecified vulnerability in the Oracle HTTP Server component of Oracle Application Server (versions 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1.0) with unknown impact and remote attack vectors related to the PHP Module (aka Vuln# OHS03). The connected sources confirm this CVE entr...

CVE-2006-5358

Technical details of CVE-2006-5358 are not publicly available in the provided documents. Monitor for updates from Oracle advisories or security bulletins; current sources confirm an unspecified vulnerability in Oracle Forms without specifics.

CVE-2006-5365

Technical details for CVE-2006-5365 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates from official advisories.

CVE-2006-5372

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS11 for Oracle Universal Work Queue and 2 APPS12 for Oracle Application Object Library...