Oracle HTTP Server A vulnerability exists in the HTTP Server component.

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides features such as middleware, Oracle HTTP Server, a component based on Apache HTTP Server and used to create web servers. The platform provides...

Oracle E-Business Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2015 Oracle Critical Patch Update CPU. It is, therefore, affected by affected by vulnerabilities in the following components : - Oracle Application Object Library CVE-2015-2618 - Oracle Application Object Library...

Oracle HTTP Server Cross-Site Scripting - Ver2 (CVE-2004-2115)

A cross-site scripting vulnerability has been reported in Oracle HTTP Server. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Oracle HTTP Server Arbitrary Code Execution Vulnerability

Oracle HTTP Server is an apache-based WEB server. A security vulnerability in the Oracle HTTP Server Web Listener child allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

CVE-2015-0386

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191...

CVE-2014-6571

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2011-1944...

Design/Logic Flaw

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

CVE-2014-0191

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (July 2014 CPU)

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities in relation to the Oracle WebLogic plugins. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid76618;...

Oracle HTTP Server Installed

Binary data oraclehttpserverinstalled.nbin...

CVE-2014-4251

CVE-2014-4251 is tied to Oracle Fusion Middleware’s Oracle HTTP Server; the vulnerability affects the Oracle HTTP Server component in versions 11.1.1.7.0 and 12.1.2.0 via the Oracle WebLogic plugins and is described as an unspecified issue that could affect integrity when accessed by remote authe...

Oracle HTTP Server 8.1.7/9.0.1/9.2 isqlplus Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9484/info Oracle HTTP Server is reportedly prone to a cross-site scripting issue. This could permit a remote attacker to create a malicious link to the web server that includes hostile HTML and script code. If this link...

Oracle HTTP Server - XSS Header Injection

No description provided by source. --------------------------------------------------------------------------------------------------------- Oracle HTTP Server XSS Header Injection --------------------------------------------------------------------------------------------------------- Attack...

Oracle HTTP Server (January 2007 CPU)

According to its banner, the version of Oracle HTTP Server installed on the remote host is potentially affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17730; scriptcvsdate"Date: 2018/11/15 20:50:25"; scriptversion"1.6";...

Oracle HTTP Server (October 2006 CPU)

According to its banner, the version of Oracle HTTP Server installed on the remote host is potentially affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17731; scriptcvsdate"Date: 2018/11/15 20:50:25"; scriptversion"1.9"; scriptcvei...

Oracle HTTP Server (January 2006 CPU)

According to its banner, the version of Oracle HTTP Server installed on the remote host is potentially affected by multiple vulnerabilities : - An unspecified information disclosure issue exists. CVE-2006-0286 - An unspecified error can allow denial of service attacks. CVE-2006-0287 C Tenable...

Oracle HTTP Server Version

The remote host is running the Oracle HTTP Server, a proprietary web server. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56876; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Orac...

Oracle Database Multiple Vulnerabilities (October 2005 CPU)

The remote Oracle database server is missing the October 2005 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Change Data Capture - Data Guard Logical Standby - Data Pump Export - Database Scheduler - Export - Locale - Materialize...

Oracle Releases Security Alert for Oracle HTTP Server Products

Oracle has released a security alert to address a vulnerability in Apache HTTPD. This vulnerability affects: Oracle Fusion Middleware 11g Release 1, versions 11.1.1.3.0, 11.1.1.4.0, 11.1.1.5.0 Oracle Application Server 10g Release 3, version 10.1.3.5.0 Oracle Application Server 10g Release 2,...

Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability

This host is running Oracle HTTP Server and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclehttpserverxssheaderinjectionvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Oracle HTTP Server 'Expect' Header Cross-Site Scripting Vulnerability Authors: Sooraj KS...