860 matches found
CVE-2007-3861
Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have an unknown impact via custom applications that use JBO.KEY, aka JDEV01...
CVE-2007-3866
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via a Oracle Configurator APPS02, b Oracle iExpenses APPS03, c Oracle Application Object Library APPS09, and 1 APPS12, 2 APPS13, and 3 APPS14 in d Oracle Payables...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...
CVE-2007-3860
Unspecified vulnerability in Oracle Application Express formerly Oracle HTML DB 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwvflowsecurity.checkdbpassword...
CVE-2007-3862
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3866
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via a Oracle Configurator APPS02, b Oracle iExpenses APPS03, c Oracle Application Object Library APPS09, and 1 APPS12, 2 APPS13, and 3 APPS14 in d Oracle Payables...
CVE-2007-3867
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to 1 APPS04, 2 APPS05, and 3 APPS06 in a Oracle Application Object Library, 4 APPS07 in Oracle Customer Intelligence, 5 APPS08 in Oracle Payments, 7 APPS10 in Oracle Human...
CVE-2007-3862
Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka AS01...
CVE-2007-3860
Unspecified vulnerability in Oracle Application Express formerly Oracle HTML DB 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwvflowsecurity.checkdbpassword...
Cross site scripting
Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...
CVE-2007-3553
Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...
EUVD-2007-3537
Cross-site scripting XSS vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script or HTML via a URL to the "Secondary Login Page", as demonstrated using 1 pls/ and 2 pls/MSBEP004/. NOTE: the provenance of this information is...
Design/Logic Flaw
Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03...
Code injection
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka AS05...
CVE-2007-2120
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01...
Design/Logic Flaw
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02...
CVE-2007-2124
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka AS05...
CVE-2007-2121
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02...