CVE-2007-0281

Public documents provided do not include concrete technical details (affected product, root cause, exploit vectors, or remediation) for CVE-2007-0281; monitor for updates.

CVE-2007-0287

Technical details are not publicly available in the provided documents for CVE-2007-0287; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2009-1990

CVE-2009-1990 affects Oracle Application Server BI Enterprise Edition (Business Intelligence Enterprise Edition component) in Oracle Application Server 10.1.3.4.1. The Oracle CPU/Oracle Application Server risk matrix lists this as a local vulnerability with confidentiality impact Partial and no e...

CVE-2009-3407

Mode C (Normal): The CVE-2009-3407 vulnerability affects Oracle Application Server Portal (Portal component) in 10.1.2.3 and 10.1.4.2. It is exploitable over HTTP by remote attackers without authentication, with a CVSS v2 base score of 4.3 (Network, Medium complexity, no auth, Partial integrity i...

CVE-2010-0067

CVE-2010-0067 affects the Oracle Application Server 10g (Release 2) components, specifically the Oracle Containers for J2EE, versions 10.1.2.3 and 10.1.3.4. The vulnerability is exploitable remotely over HTTP by unauthenticated users and can impact confidentiality (Partial) with network access an...

CVE-2002-0947

CVE-2002-0947 describes a buffer overflow in the rwcgi60 CGI program used by Oracle Reports Server 6.0.8.18.0 and earlier (Oracle9iAS and other products). The vulnerability allows a remote attacker to execute arbitrary code via a long database name parameter. The Oracle RWCGI60 component handles ...

CVE-2008-2614

CVE-2008-2614 affects the Oracle HTTP Server component bundled with Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3. The CVE entry itself is generic (unknown impact and remote vectors). Oracle’s July 2008 Critical Patch Update lists CVE-2008-2614 in the Oracle Application Server risk ma...

CVE-2002-1089

CVE-2002-1089 affects rwcgi60, the CGI used with Oracle Reports Server. The flaw is an information disclosure: the program can reveal sensitive data (the full pathname), which an attacker could leverage for further attacks. Connected documents (Nessus plugin) confirm rwcgi60 exposure as part of O...

CVE-2002-2153

The vulnerability CVE-2002-2153 is a format string flaw in the PL/SQL module’s administrative pages of Oracle Application Server 4.0.8 (and 4.0.8 2). The underlying issue is a format string vulnerability that allows remote attackers to execute arbitrary code. The affected component is the PL/SQL ...

CVE-2006-5354

Technical details for CVE-2006-5354 are not publicly provided in the supplied documents. No affected products, impact, or remediation are specified here; monitor for updates and additional technical disclosures.

CVE-2009-0993

CVE-2009-0993 is a format-string vulnerability in Oracle Application Server 10g’s OPMN daemon (opmn). A remote attacker can trigger arbitrary code execution by sending crafted HTTP POST requests that are logged by opmn.log, exploiting improper handling of format specifiers. Affected product is Or...

CVE-2000-1236

Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...

CVE-2002-0564

CVE-2002-0564 affects Oracle 9i Application Server 1.0.2.x via PL/SQL module 3.0.9.8.2. An attacker can bypass authentication for a Database Access Descriptor (DAD) by altering the URL to reference a different DAD that already has valid credentials, enabling unauthorized access. The description n...

CVE-2002-0566

CVE-2002-0566 affects Oracle 9i Application Server (iAS) with the PL/SQL module 3.0.9.8.2. The vulnerability allows an unauthenticated remote attacker to crash the Apache-based PL/SQL service by sending a malformed HTTP Authorization header (no auth type). Impact is denial of service (partial ava...

CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...

CVE-2004-2134

CVE-2004-2134 affects Oracle TopLink Mapping Workbench. The vulnerability is a weak encryption of passwords, enabling local users to decrypt them. The CVSS shows local access with low complexity and partial confidentiality/integrity/availability impact. No remediation/version details are provided...

CVE-2006-0273

Technical details for CVE-2006-0273 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the records only note an unspecified vulnerability in the Oracle Portal component.

CVE-2006-0283

CVE-2006-0283 refers to an unspecified vulnerability in Oracle products (Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, Collaboration Suite Release 2) and Oracle9i (9.0.4.2), linked to Oracle Vuln# DBC02 in the Reorganize Objects & Convert Tablespace component. Public descriptions do ...

CVE-2006-0284

Technical details about CVE-2006-0284 are not publicly provided in the supplied documents; no specific affected products, versions, or exploit information are disclosed. Monitor for updates.

CVE-2006-3712

CVE-2006-3712 refers to an unspecified vulnerability in OC4J (Oracle Containers for J2EE) within Oracle Application Server versions 9.0.4.2 and 10.1.2.0.0. The available description states the impact and attack vectors are unknown, with the vulnerability also known as Oracle Vuln# AS07. The Conne...

CVE-2007-0286

CVE-2007-0286 affects Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, with an unspecified vulnerability in Containers for J2EE (OC4J07). The initial description notes unknown impact and attack vectors; no concrete exploit details, affected subcomponents, version...

CVE-2007-5524

Technical details for CVE-2007-5524 are not publicly provided in the supplied documents; no specific affected products/versions, root cause, or remediation are disclosed. Monitor for updates.

CVE-2009-0989

CVE-2009-0989 affects Oracle BI Publisher in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3. Description indicates an unspecified vulnerability allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. Connected sources list these versions under...

CVE-2005-3204

CVE-2005-3204 is a Cross-site Scripting (XSS) vulnerability affecting Oracle XML DB 9iR2. According to the connected Nessus/NVD records, remote attackers could inject arbitrary web script or HTML via the query string in an HTTP request. The available documents do not specify the affected product ...

CVE-2006-0290

Technical details for CVE-2006-0290 are not publicly disclosed in the provided documents; the entries only note an unspecified vulnerability in the Oracle Workflow Cartridge. Monitor for updates.

CVE-2006-3706

Technical details about CVE-2006-3706 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-5365

Technical details for CVE-2006-5365 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates from official advisories.

CVE-2007-2121

Technical details for CVE-2007-2121 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vulnerability databases.

CVE-2007-3863

Technical details for CVE-2007-3863 are not publicly provided in the supplied documents. No explicit affected versions, root cause, impact, or remediation are described here. Monitor for updates from Oracle advisories and security feeds.

CVE-2008-1824

Technical details about CVE-2008-1824 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected versions, impact, or remediation are present here.

CVE-2001-0591

CVE-2001-0591 is a directory traversal vulnerability in Oracle JSP 1.0.x–1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 that allows remote attackers to read or execute arbitrary .jsp files via a '..' path traversal. The connected Nessus entry confirms the CVE is among Oracle Application Server vulnerab...

CVE-2002-0569

CVE-2002-0569 affects Oracle 9i Application Server via the XSQLServlet, enabling remote authentication bypass to access configuration files. The core issue is bypassing access restrictions on configuration files through direct requests to XSQLServlet, leading to potential exposure of sensitive fi...

CVE-2006-0275

CVE-2006-0275 affects Oracle Application Server 9.0.4.2, specifically the Oracle Reports Developer component. The connected documents identify the issue as a directory traversal vulnerability that can read portions of arbitrary XML files via the customize parameter (Oracle Vuln REP04). The NVD me...

CVE-2006-0291

Technical details for CVE-2006-0291 are not publicly available in the provided documents. Affected Oracle components are listed but no concrete root cause, impact, or fix information is disclosed here; monitor for updates.

CVE-2007-0283

Technical details for CVE-2007-0283 are not provided in the connected documents; the entries cite an unspecified vulnerability related to Oracle Containers for J2EE (OC4J02). Monitor for updates.

CVE-2007-0289

Technical details about CVE-2007-0289 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-5438

Technical details about CVE-2008-5438 are not provided in the connected documents; the initial entry only notes an unspecified vulnerability in the Oracle Portal component of Oracle Application Server 10.1.2.3/10.1.4.2. Monitor for updates.

CVE-2008-7237

The CVE-2008-7237 entry concerns Oracle Internet Directory in Oracle Application Server 9.0.4.3 and 10.1.2.2. It is described as an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors (AS06). The connected documents confirm affected produ...

CVE-2009-3412

CVE-2009-3412 affects Oracle Database components (Unzip) in 9.2.0.8, 9.2.0.8DV and 10.1.0.5, and Oracle Application Server 10.1.2.3. Root cause: Unzip component vulnerability enabling local logon and partial confidentiality impact. CVSS in NVD shows Low base score (Local, High auth, Partial confi...

CVE-2010-0070

CVE-2010-0070 is an Oracle App Server issue affecting Oracle Containers for J2EE in Oracle Application Server 10.1.2.3 and 10.1.3.4. It allows remote integrity impact via unknown vectors; exploitation details are not specified in the documents. The CVE is addressed in Oracle’s January 2010 Critic...

CVE-2006-3708

Technical details for CVE-2006-3708 are not provided in the supplied documents. Public information appears unavailable in these sources; monitor for updates.

CVE-2007-5525

Technical details about CVE-2007-5525 are not provided in the supplied documents; the entries describe an unspecified vulnerability without impact or vectors. Monitor for updates.

CVE-2008-3977

Technical details for CVE-2008-3977 are not provided in the connected documents. Public information about affected components and exact vulnerability vectors is not available here; monitor for updates from official advisories.

CVE-2010-0066

CVE-2010-0066 affects Oracle Application Server’s Access Manager Identity Server. The vulnerability permits remote attackers to affect integrity via HTTP without authentication and has a CVSS v2 base score of 5.0 (medium). Affected releases are Oracle Application Server 7.0.4.3 and 10.1.4.2. The ...

CVE-2002-0565

The CVE-2002-0565 incident concerns Oracle 9iAS 1.0.2.x, where JSP files compiled under the web root in the _pages directory are world-readable. This enables remote attackers to read JSP source and derive sensitive information (e.g., usernames and passwords) via a direct HTTP request to _pages. T...

CVE-2005-3452

Technical details, affected products/versions, and remediation for CVE-2005-3452 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-5363

Technical details for CVE-2006-5363 are not publicly available in the provided documents. Monitor for updates from vendor advisories or security feeds before drawing conclusions about impact, affected components, or fixes.

CVE-2007-5523

Technical details about CVE-2007-5523 are not publicly available in the provided documents. Monitor for updates.

CVE-2008-7233

CVE-2008-7233 affects the Oracle E-Business Suite/E-Business Application client. The vulnerability is described as unspecified, impacting confidentiality, integrity, and availability via unknown vectors related to the Oracle Jinitiator component (aka AS02) in Oracle Application Server 1.1.8.26 an...

CVE-2008-7234

CVE-2008-7234 concerns an unspecified vulnerability in the Oracle BPEL Worklist Application component of Oracle Application Server 10.1.2.2 and 10.1.3.3. The description states that remote attackers can affect confidentiality, integrity, and availability via unknown vectors (aka AS03). The CVSS b...