CVE-2005-3498

CVE-2005-3498 affects IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5. When session trace is enabled, the server logs may record the full URL including the queryString during URL encoding, potentially exposing sensitive information via ...

Oracle 9iAS OWA UTIL access

Oracle 9iAS can provide access to the PL/SQL application OWAUTIL that provides web access to some stored procedures. These procuedures, without authentication, can allow users to access sensitive information such as source code of applications, user credentials to other database servers and run...

Zope ZClass Permission Mapping Bug

The remote web server contains an application server that is prone to a privilege escalation flaw. Description : The remote web server uses a version of Zope which is older than version 2.3.3. In such versions, any user can visit a ZClass declaration and change the ZClass permission mappings for...

FastCGI samples Cross Site Scripting

Two sample CGI's supplied with FastCGI are vulnerable to cross-site scripting attacks. FastCGI is an 'open extension to CGI that provides high performance without the limitations of server specific APIs', and is included in the default installation of the 'Unbreakable' Oracle9i Application Server...

Oracle 9iAS access to SOAP documentation

In a default installation of Oracle 9iAS, it is possible to access SOAP documentation. These files might be useful for an attacker to determine what application server is being used. OpenVAS Vulnerability Test $Id: oracle9isoapdocs.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS...

Service Detection with 'HELP' Request

This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Non-Existent Page Physical Path Disclosure Vulnerability (HTTP)

The remote web server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2003 Michel Arboi SPDX-FileCopyrightText: Improved / extended code / detection routine since 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Oracle Applications One-Hour Install Detect

We detected the remote web server as an Oracle Applications SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Talentsoft Web+ Information Disclosure Vulnerability

The remote host appears to be running Web+ Application Server which is affected by an information disclosure flaw. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2005-3453

Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln 1 AS12 and 2 AS14...

CVE-2005-3451

Unspecified vulnerability in SQLReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln AS10...

CVE-2005-3448

Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln AS01...

CVE-2005-3445

Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack vectors, aka Oracle Vuln 1 DB30 and AS03 or 2 DB31 and AS05...

CVE-2005-3450

Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln AS04...

CVE-2005-3449

Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln 1 AS02 in Containers for J2EE, 2 AS07 in Internet Directory, 3 AS09 in Report Server, and 4 AS11 in Web Cache...

CVE-2005-3448

Technical details for CVE-2005-3448 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vendor bulletins to learn affected versions, impact, and remediation.

CVE-2005-3451

Technical details for CVE-2005-3451 are not provided in the supplied documents. No affected products or fixes are specified. Monitor for updates.

CVE-2005-3448

Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln AS01...

CVE-2005-3445

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3449

CVE-2005-3449 pertains to Oracle Application Server 9.0–10.1.2.0, with multiple unspecified vulnerabilities affecting components AS02 (Containers for J2EE), AS07 (Internet Directory), AS09 (Report Server), and AS11 (Web Cache). The connected documents do not provide concrete technical details (no...