CVE-2006-5346

The CVE-2006-5346 entry describes an unspecified vulnerability in Oracle HTTP Server 9.2.0.7 (used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite/Applications 11.5.10CU2) with unknown impact and remote attack vectors related to htdigest (aka OHS02). The connected documents corr...

CVE-2018-2561

CVE-2018-2561 affects the Oracle HTTP Server component of Oracle Fusion Middleware (Web Listener). Affected supported versions are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. The vulnerability is exploitable by an unauthenticated, network-accessing attacker over HTTP and can le...

CVE-2004-1877

The CVE-2004-1877 issue is documented in connected sources as a phishing vulnerability in Oracle 9iAS Single Sign-On. Specifically, the p_submit_url value in the sample login form for Oracle SSO (9iAS, Release 2/9.0.2) can be exploited by remote attackers to spoof the login page, potentially caus...

CVE-2016-0671

CVE-2016-0671 affects Oracle Fusion Middleware 12.1.2.0, specifically the Oracle HTTP Server component and its OSSL Module subcomponent. The connected CNVD entry describes a data‑read vulnerability in the OSSL Module of Oracle HTTP Server, enabling remote attackers to compromise data confidential...

CVE-1999-1125

Oracle Webserver 2.1 and earlier runs setuid root; the configuration file is owned by the oracle account. This allows any local or remote attacker with oracle access to gain privileges or modify arbitrary files by altering the configuration file. No remediation details are provided in the supplie...

CVE-2026-60364

Concisely: CVE-2026-60364 affects Oracle Fusion Middleware’s WebLogic Server Proxy Plug-In for Third-Party Web Servers, specifically versions 12.2.1.4.0 and 14.1.2.0.0. The issue allows an unauthenticated attacker to compromise the plug‑in via HTTP, enabling unauthorized creation, deletion or mod...

CVE-2026-60431

The CVE-2026-60431 entry affects Oracle HTTP Server (mod_proxy) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable via unauthenticated HTTP access and may allow access to or disclosure of data; the impact is limited to the Oracle HTTP Server co...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...

CVE-2026-60438

CVE-2026-60438 concerns the Oracle HTTP Server component (mod_ssl) within Oracle Fusion Middleware. Affected are supported versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the server, potentially leading to creation, deletion or modificat...

CVE-2026-60363

CVE-2026-60363 affects Oracle HTTP Server (Apache Plugin) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.0.0. The flaw allows unauthenticated, network-based HTTP access that can lead to takeover of Oracle HTTP Server (CVSS 3.1 base score 9.8). Connected sources confirm vulnerable co...

CVE-2026-34291

CVE-2026-34291 affects the Oracle Fusion Middleware Oracle HTTP Server (Core) with compromised versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker who can reach the server over HTTP to gain access that could lead to unauthorized creation, deletion or modificat...

CVE-2026-60530

CVE-2026-60530 is a vulnerability in Oracle HTTP Server (Oracle Fusion Middleware), specifically in the mod_http2.so component. Affected software/version: Oracle HTTP Server 14.1.2.0.0. The issue enables a low-privileged attacker who can log on to the infrastructure where Oracle HTTP Server runs ...