Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability

This host is running Oracle HTTP Server and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclehttpserverxssheaderinjectionvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability Authors: Sooraj KS...

Design/Logic Flaw

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-4455

CVE-2010-4455 describes an unspecified vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware 11.1.1.2/11.1.1.3 that could allow remote attackers to affect confidentiality and integrity via unknown vectors related to the Apache Plugin. The NVD entry lists a CVSSv2 base scor...

Oracle HTTP Server mod_access Restriction Bypass (CVE-2005-1383)

The Oracle HTTP Server OHS is bundled with recent Oracle Database Server releases 8.1.7 and above, 9i and10g. The OHS is provided to enable the distribution of applications over the web. The OHS is derivative of the Apache HTTP server project, and enhanced with a set of Oracle extensions. There...

Design/Logic Flaw

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN02...

CVE-2007-0280

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 2007012...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka 1 OHS01, 2 OHS02, 3 OHS05, 4 OHS06, and 5 OHS07...

Buffer overflow

Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 2007012...

CVE-2007-0279

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka 1 OHS01, 2 OHS02, 3 OHS05, 4 OHS06, and 5 OHS07...

CVE-2007-0281

Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1, 10.1.2.0.2, 10.1.2.1, and 10.1.3.0; and Collaboration Suite 9.0.4.2 and 10.1.2; have unknown impact and attack vectors related to the Oracle HTT...

CVE-2007-0279

Technical details about CVE-2007-0279 are not publicly available in the provided connected documents; the materials reference Oracle HTTP Server and related components with unspecified vulnerabilities. Monitor for updates for further specifics.

CVE-2006-5347

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln OHS04...

CVE-2006-5353

Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Modrewrite Module, aka Vuln OHS01...

CVE-2006-5349

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln OHS07...

CVE-2006-5357

Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln OHS03...

CVE-2006-5354

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln OHS0...

CVE-2006-5350

CVE-2006-5350 affects Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite/Applications 11.5.10CU2; the vulnerability impact is unspecified in the provided documents, with local attack vectors indicated. No concrete root-cause, exploit details, or remediation are given in the connected sources....

CVE-2006-5350

Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln OHS08...

Workaround for unpatched Oracle PLSQL Gateway flaw

There's a critical flaw in the Oracle PLSQL Gateway, a component of iAS, OAS and the Oracle HTTP Server, that allows attackers to bypass the PLSQLExclusion list and gain access to "excluded" packages and procedures. This can be exploited by an attacker to gain full DBA control of the backend...

Buffer overflow

Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln OHS02...