84 matches found
CVE-2006-5358
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln FORM01...
CVE-2006-5365
Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln FORM02...
CVE-2006-5360
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln FORM03...
CVE-2006-5358
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln FORM01...
CVE-2006-5358
Technical details of CVE-2006-5358 are not publicly available in the provided documents. Monitor for updates from Oracle advisories or security bulletins; current sources confirm an unspecified vulnerability in Oracle Forms without specifics.
CVE-2006-0284
Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack vectors, as identified by Oracle Vuln 1 FORM01 and 2 FORM02 in the Oracle Forms component...
CVE-2005-3207
The forms servlet f90servlet in Oracle Forms 4.5.10.22 allows remote attackers to cause a denial of service TNS listener stop via a userid parameter that contains a STOP command...
Oracle Forms - Servlet TLS Listener Remote Denial of Service
source: https://www.securityfocus.com/bid/15039/info Oracle Forms is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a specific HTTP request, remote attackers may cause the affected...
Oracle Forms - Servlet TLS Listener Remote Denial of Service
Oracle Forms - Servlet TLS Listener Remote Denial of Service source: https://www.securityfocus.com/bid/15039/info Oracle Forms is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a specif...
[Full-disclosure] Shutdown TNS Listener via Oracle Forms Servlet
Shutdown TNS Listener via Oracle Forms Servlet Name Shutdown TNS Listener via Oracle Forms Servlet Systems Affected Oracle Forms Severity Medium Risk Category Denial of Service Vendor URL http://www.oracle.com This advisory http://www.red-database-security.com/advisory/oracleformsshutdown.html...
Run any OS Command via unauthorized Oracle Forms
Name Run any OS Command via unauthorized Oracle Forms Systems Affected Oracle Web Forms 4.5, 5.0, 6.0, 6i, 9i, 10g Severity High Risk Category OS command execution Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 18 July 2005 V 1.00 Advisory...
Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution
Oracle Forms 6i9i4.5.105.06.0.810g Services - Unauthorized Form Execution source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the...
Oracle Forms 6i/9i/4.5.10/5.0/6.0.8/10g Services - Unauthorized Form Execution
source: https://www.securityfocus.com/bid/14319/info Oracle Forms Services is susceptible to an unauthorized form execution vulnerability. Attackers may exploit this vulnerability to execute arbitrary commands with the privileges of the Oracle account under which the server is executing. It shoul...
CVE-2005-2294
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...
CVE-2005-2294
Affected software: Oracle Forms on Unix (versions 4.5, 6.0, 6i, 9i). Vulnerability: when a large number of records are retrieved by an Oracle form, a copy of the database tables is stored in a world-readable temporary file. Root cause: insecure temporary file handling enabling a local user to rea...
CVE-2005-2294
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers...
PT-2005-3221 · Oracle · Oracle Forms
Name of the Vulnerable Software and Affected Versions: Oracle Forms versions 9.0.4 Description: The issue allows local users to obtain sensitive database information because database usernames and passwords are stored in a temporary file that is not properly deleted after use. Recommendations: Fo...
Oracle Forms Insecure Temporary File Handling
Name Oracle Forms Insecure Temporary File Handling Systems Affected Oracle Forms 4.5, 6.0, 6i, 9i Severity Medium Risk Category Information disclosure Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 13 July 2005 V 1.00 Advisory AKSEC2003-006 Oracle...
Oracle Forms Builder Password in Temp Files
Name Oracle Forms Builder Password in Temp Files Systems Affected Oracle Formsbuilder 9.0.4 Severity Low Risk Category Information disclosure of passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 12 July 2005 V 1.00 Advisory AKSEC2003-006...