CVE-2007-3854

CVE-2007-3854 affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The entry documents multiple unspecified vulnerabilities allowing remote authenticated users to impact system via two components: the Advanced Queuing component (DB02) and the Spatial component (DB12). The description notes th...

CVE-2006-7138

CVE-2006-7138 affects Oracle Application Express/HTMLDB (APEX) prior to 2.2. The issue is an SQL injection in WWV_FLOW_UTILITIES.gen_popup_list inside the WWV_FLOW_UTILITIES package, enabling remote authenticated users to alter P_LOV and calculate a matching MD5 checksum for P_LOV_CHECKSUM to exe...

CVE-2006-5351

Oracle Application Express (APEX/HTMLDB) prior to 2.2.1 contains multiple documented issues (APEX01–APEX35) including SQL injection in WWV_FLOW_UTILITIES.gen_popup_list and XSS via NOTIFICATION_MSG and WWV_FLOW_ITEM_HELP. CVEs CVE-2006-7138, CVE-2006-7158, and CVE-2006-5599 describe these vectors...

CVE-2006-7158

Oracle Application Express (APEX/HTMLDB) prior to version 2.2.1 is affected by a cross-site scripting (XSS) vulnerability in the NOTIFICATION_MSG parameter in the APEX UI. The issue allows remote attackers to inject arbitrary web script or HTML. The root cause is insufficient input handling for t...

CVE-2006-5352

CVE-2006-5352 pertains to Oracle Application Express 1.5–1.6.1 with multiple unspecified vulnerabilities. Connected data indicates that Oracle Application Express prior to 2.2.1 was addressed by a security update that fixed 35 issues, 25 of which may be remotely exploitable without authentication...

CVE-2006-5599

Technical details about CVE-2006-5599 are not publicly available in the provided connected documents. No specifics on affected components, root cause, affected versions, or remediation are included. Monitor for updates.

CVE-2007-3860

CVE-2007-3860 affects Oracle Application Express (APEX) versions 2.2.0.00.32 through 3.0.0.00.20. The vulnerability is described as an SQL injection in wwv_flow_security.check_db_password due to insufficient checks for the '"' character. The connected sources indicate this is a SQL injection vuln...

CVE-2026-21931

The CVE-2026-21931 affects Oracle APEX Sample Applications (Brookstrut Sample App). Affected versions are 23.2.0, 23.2.1, 24.1.0, 24.2.0, and 24.2.1. The issue allows a low-privilege attacker with network access via HTTP to compromise the application, with user interaction required. Successful ex...