CVE-2005-3446

Technical details for CVE-2005-3446 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-3448

Technical details for CVE-2005-3448 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vendor bulletins to learn affected versions, impact, and remediation.

CVE-2002-0564

CVE-2002-0564 affects Oracle 9i Application Server 1.0.2.x via PL/SQL module 3.0.9.8.2. An attacker can bypass authentication for a Database Access Descriptor (DAD) by altering the URL to reference a different DAD that already has valid credentials, enabling unauthorized access. The description n...

CVE-2006-5358

Technical details of CVE-2006-5358 are not publicly available in the provided documents. Monitor for updates from Oracle advisories or security bulletins; current sources confirm an unspecified vulnerability in Oracle Forms without specifics.

CVE-2007-0287

Technical details are not publicly available in the provided documents for CVE-2007-0287; no affected products, impact, or remediation are specified here. Monitor for updates.

CVE-2008-2614

CVE-2008-2614 affects the Oracle HTTP Server component bundled with Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3. The CVE entry itself is generic (unknown impact and remote vectors). Oracle’s July 2008 Critical Patch Update lists CVE-2008-2614 in the Oracle Application Server risk ma...

CVE-2009-0993

CVE-2009-0993 is a format-string vulnerability in Oracle Application Server 10g’s OPMN daemon (opmn). A remote attacker can trigger arbitrary code execution by sending crafted HTTP POST requests that are logged by opmn.log, exploiting improper handling of format specifiers. Affected product is Or...

CVE-2009-1990

CVE-2009-1990 affects Oracle Application Server BI Enterprise Edition (Business Intelligence Enterprise Edition component) in Oracle Application Server 10.1.3.4.1. The Oracle CPU/Oracle Application Server risk matrix lists this as a local vulnerability with confidentiality impact Partial and no e...

CVE-2009-3412

CVE-2009-3412 affects Oracle Database components (Unzip) in 9.2.0.8, 9.2.0.8DV and 10.1.0.5, and Oracle Application Server 10.1.2.3. Root cause: Unzip component vulnerability enabling local logon and partial confidentiality impact. CVSS in NVD shows Low base score (Local, High auth, Partial confi...

CVE-2002-1089

CVE-2002-1089 affects rwcgi60, the CGI used with Oracle Reports Server. The flaw is an information disclosure: the program can reveal sensitive data (the full pathname), which an attacker could leverage for further attacks. Connected documents (Nessus plugin) confirm rwcgi60 exposure as part of O...

CVE-2004-2134

CVE-2004-2134 affects Oracle TopLink Mapping Workbench. The vulnerability is a weak encryption of passwords, enabling local users to decrypt them. The CVSS shows local access with low complexity and partial confidentiality/integrity/availability impact. No remediation/version details are provided...

CVE-2006-3712

CVE-2006-3712 refers to an unspecified vulnerability in OC4J (Oracle Containers for J2EE) within Oracle Application Server versions 9.0.4.2 and 10.1.2.0.0. The available description states the impact and attack vectors are unknown, with the vulnerability also known as Oracle Vuln# AS07. The Conne...

CVE-2006-5354

Technical details for CVE-2006-5354 are not publicly provided in the supplied documents. No affected products, impact, or remediation are specified here; monitor for updates and additional technical disclosures.

CVE-2007-5524

Technical details for CVE-2007-5524 are not publicly provided in the supplied documents; no specific affected products/versions, root cause, or remediation are disclosed. Monitor for updates.

CVE-2009-0989

CVE-2009-0989 affects Oracle BI Publisher in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3. Description indicates an unspecified vulnerability allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. Connected sources list these versions under...

CVE-2000-1235

Oracle IAS 3.0.7 and earlier are affected by CVE-2000-1235 due to default configurations of the port listener and mod_plsql, enabling remote attackers to view privileged database information via HTTP requests for DAD files. Affected component is the mod_plsql DAD handling exposed by default; root...

CVE-2000-1236

Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...

CVE-2002-0566

CVE-2002-0566 affects Oracle 9i Application Server (iAS) with the PL/SQL module 3.0.9.8.2. The vulnerability allows an unauthenticated remote attacker to crash the Apache-based PL/SQL service by sending a malformed HTTP Authorization header (no auth type). Impact is denial of service (partial ava...

CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...

CVE-2002-2153

The vulnerability CVE-2002-2153 is a format string flaw in the PL/SQL module’s administrative pages of Oracle Application Server 4.0.8 (and 4.0.8 2). The underlying issue is a format string vulnerability that allows remote attackers to execute arbitrary code. The affected component is the PL/SQL ...

CVE-2006-0283

CVE-2006-0283 refers to an unspecified vulnerability in Oracle products (Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, Collaboration Suite Release 2) and Oracle9i (9.0.4.2), linked to Oracle Vuln# DBC02 in the Reorganize Objects & Convert Tablespace component. Public descriptions do ...

CVE-2007-0289

Technical details about CVE-2007-0289 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-2121

Technical details for CVE-2007-2121 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and vulnerability databases.

CVE-2007-3863

Technical details for CVE-2007-3863 are not publicly provided in the supplied documents. No explicit affected versions, root cause, impact, or remediation are described here. Monitor for updates from Oracle advisories and security feeds.

CVE-2008-1824

Technical details about CVE-2008-1824 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected versions, impact, or remediation are present here.

CVE-2002-0569

CVE-2002-0569 affects Oracle 9i Application Server via the XSQLServlet, enabling remote authentication bypass to access configuration files. The core issue is bypassing access restrictions on configuration files through direct requests to XSQLServlet, leading to potential exposure of sensitive fi...

CVE-2002-0947

CVE-2002-0947 describes a buffer overflow in the rwcgi60 CGI program used by Oracle Reports Server 6.0.8.18.0 and earlier (Oracle9iAS and other products). The vulnerability allows a remote attacker to execute arbitrary code via a long database name parameter. The Oracle RWCGI60 component handles ...

CVE-2006-0273

Technical details for CVE-2006-0273 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the records only note an unspecified vulnerability in the Oracle Portal component.

CVE-2006-0290

Technical details for CVE-2006-0290 are not publicly disclosed in the provided documents; the entries only note an unspecified vulnerability in the Oracle Workflow Cartridge. Monitor for updates.

CVE-2006-0291

Technical details for CVE-2006-0291 are not publicly available in the provided documents. Affected Oracle components are listed but no concrete root cause, impact, or fix information is disclosed here; monitor for updates.

CVE-2006-5365

Technical details for CVE-2006-5365 are not publicly provided in the supplied documents; no affected product versions, root cause, or remediation are specified. Monitor for updates from official advisories.

CVE-2007-0286

CVE-2007-0286 affects Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, with an unspecified vulnerability in Containers for J2EE (OC4J07). The initial description notes unknown impact and attack vectors; no concrete exploit details, affected subcomponents, version...

CVE-2007-5523

Technical details about CVE-2007-5523 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-0067

CVE-2010-0067 affects the Oracle Application Server 10g (Release 2) components, specifically the Oracle Containers for J2EE, versions 10.1.2.3 and 10.1.3.4. The vulnerability is exploitable remotely over HTTP by unauthenticated users and can impact confidentiality (Partial) with network access an...

CVE-2010-0070

CVE-2010-0070 is an Oracle App Server issue affecting Oracle Containers for J2EE in Oracle Application Server 10.1.2.3 and 10.1.3.4. It allows remote integrity impact via unknown vectors; exploitation details are not specified in the documents. The CVE is addressed in Oracle’s January 2010 Critic...

CVE-2001-0591

CVE-2001-0591 is a directory traversal vulnerability in Oracle JSP 1.0.x–1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 that allows remote attackers to read or execute arbitrary .jsp files via a '..' path traversal. The connected Nessus entry confirms the CVE is among Oracle Application Server vulnerab...

CVE-2005-3204

CVE-2005-3204 is a Cross-site Scripting (XSS) vulnerability affecting Oracle XML DB 9iR2. According to the connected Nessus/NVD records, remote attackers could inject arbitrary web script or HTML via the query string in an HTTP request. The available documents do not specify the affected product ...

CVE-2006-3706

Technical details about CVE-2006-3706 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2006-3711

Technical details about CVE-2006-3711 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-0283

Technical details for CVE-2007-0283 are not provided in the connected documents; the entries cite an unspecified vulnerability related to Oracle Containers for J2EE (OC4J02). Monitor for updates.

CVE-2008-7233

CVE-2008-7233 affects the Oracle E-Business Suite/E-Business Application client. The vulnerability is described as unspecified, impacting confidentiality, integrity, and availability via unknown vectors related to the Oracle Jinitiator component (aka AS02) in Oracle Application Server 1.1.8.26 an...

CVE-2008-7236

Affected software: Oracle Application Server 10.1.2.2 and 10.1.3.1, specifically the Oracle JDeveloper component. The entry describes an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors (aka AS05). The publicly available data provide no concrete explo...

CVE-2008-7237

The CVE-2008-7237 entry concerns Oracle Internet Directory in Oracle Application Server 9.0.4.3 and 10.1.2.2. It is described as an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors (AS06). The connected documents confirm affected produ...

CVE-2006-3708

Technical details for CVE-2006-3708 are not provided in the supplied documents. Public information appears unavailable in these sources; monitor for updates.

CVE-2007-5525

Technical details about CVE-2007-5525 are not provided in the supplied documents; the entries describe an unspecified vulnerability without impact or vectors. Monitor for updates.

CVE-2008-2593

CVE-2008-2593 and CVE-2008-2594 refer to distinct vulnerabilities in the Oracle Portal component of Oracle Application Server 10g (versions 10.1.2.3 and 10.1.4.2). The Initial description indicates these are unspecified vulnerabilities with unknown impact and remote vectors. Connected documentati...

CVE-2008-3975

Technical details for CVE-2008-3975 are not publicly available in the provided documents. Monitor for updates from Oracle/vendor advisories; no confirmed impact, affected versions, exploit methods, or fixes are documented here.

CVE-2008-3977

Technical details for CVE-2008-3977 are not provided in the connected documents. Public information about affected components and exact vulnerability vectors is not available here; monitor for updates from official advisories.

CVE-2010-0066

CVE-2010-0066 affects Oracle Application Server’s Access Manager Identity Server. The vulnerability permits remote attackers to affect integrity via HTTP without authentication and has a CVSS v2 base score of 5.0 (medium). Affected releases are Oracle Application Server 7.0.4.3 and 10.1.4.2. The ...

CVE-2002-0565

The CVE-2002-0565 incident concerns Oracle 9iAS 1.0.2.x, where JSP files compiled under the web root in the _pages directory are world-readable. This enables remote attackers to read JSP source and derive sensitive information (e.g., usernames and passwords) via a direct HTTP request to _pages. T...