Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

CVE-2008-7238

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

CVE-2008-7238

CVE-2008-7238 concerns multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3. Affected areas include components Mobile Application Server (APP01), Oracle Applications Framework (APP03), CRM Technical Foundation (APP05), Oracle Application Object Library (APP06), and Oracle Applic...

CVE-2008-7238

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.3 allow 1 local users to affect confidentiality and integrity via unknown vectors related to the Mobile Application Server component APP01; 2 remote attackers to affect confidentiality via unknown vectors related to the Oracle...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors...

CVE-2009-0995

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors...

Oracle Applications Server 10g Format String Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Applications Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Oracle Process Manager and Notification opmn daemon which is an HTTP...

CVE-2008-5446

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...

CVE-2006-5367

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS03 in Oracle Applications Framework, 2 APPS04 in Oracle Applications Technology Stack, and 3 APPS05 in Oracle Balanced Scorecard, 4...

CVE-2006-3716

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS01 for Internet Expenses; 2 APPS02, 3 APPS05, 4 APPS06, 5 APPS07, 6 APPS08, 7 APPS09, and 8 APPS10 for Oracle Application Object Library; 9...

CVE-2006-1882

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln 1 APPS03 in a iProcurement; 2 APPS04 in b Oracle Application Object Library; 3 APPS06, 4 APPS07, and 5 APPS08 in c Oracle Applications Technology...

CVE-2006-1882

CVE-2006-1882 affects Oracle E-Business Suite and Applications 11.5.10. The vulnerabilities span multiple areas: (1) APPS03 in iProcurement; (2) APPS04 in Oracle Application Object Library; (3) APPS06, APPS07, APPS08 in Oracle Applications Technology Stack; and (6) APPS11 in Oracle Order Capture....

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS01 in the a Application Install component; 2 APPS07 in the b Oracle Applications Framework component; 3 APPS08, 4 APPS09, 5 APPS1...

Oracle Applications One-Hour Install Detect

We detected the remote web server as an Oracle Applications' One-Hour Install web server. This web server enables attackers to configure your Oracle Application server and Oracle Database server without any need for authentication. OpenVAS Vulnerability Test $Id: oracleonehourinstall.nasl 8023...

SQL Injection in Oracle Forms

SQL Injection in Oracle Forms V1.00 © 2005 by Red-Database-Security GmbH 1/5 Summary: All Oracle Forms applications are vulnerable against SQL Injection by default. Oracle Applications =11.5.9 is not affected due to the default setting value “FORMSxxRESTRICTENTERQUERY = TRUE”. About Oracle Forms:...

CVE-2004-0543

Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries...

CVE-2004-0543

CVE-2004-0543 involves multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1–11.5.8 that allow a remote attacker to execute arbitrary SQL procedures and queries. The issue affects Oracle Applications 11.0 and E-Business Suite releases 11.5.1–11.5.8;...

CVE-2004-0543

Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries...

US-CERT Technical Cyber Security Alert TA04-160A -- SQL Injection Vulnerabilities in Oracle E-Business Suite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-160A SQL Injection Vulnerabilities in Oracle E-Business Suite Original release date: June 8, 2004 Last revised: -- Source: US-CERT Systems Affected Oracle Applications 11.0 all releases Oracle E-Business Suite 11i,...