CVE-2004-1877

The CVE-2004-1877 issue is documented in connected sources as a phishing vulnerability in Oracle 9iAS Single Sign-On. Specifically, the p_submit_url value in the sample login form for Oracle SSO (9iAS, Release 2/9.0.2) can be exploited by remote attackers to spoof the login page, potentially caus...

CVE-2016-3482

CVE-2016-3482 affects Oracle Fusion Middleware’s Oracle HTTP Server component in 11.1.1.9 and 12.1.3.0. The vulnerability is described as unspecified and enables remote attackers to impact confidentiality via the SSL/TLS Module. The issue is listed in the Oracle July 2016 CPU advisory as a vulner...

CVE-2016-0671

CVE-2016-0671 affects Oracle Fusion Middleware 12.1.2.0, specifically the Oracle HTTP Server component and its OSSL Module subcomponent. The connected CNVD entry describes a data‑read vulnerability in the OSSL Module of Oracle HTTP Server, enabling remote attackers to compromise data confidential...

CVE-1999-1125

Oracle Webserver 2.1 and earlier runs setuid root; the configuration file is owned by the oracle account. This allows any local or remote attacker with oracle access to gain privileges or modify arbitrary files by altering the configuration file. No remediation details are provided in the supplie...

CVE-2026-34291

CVE-2026-34291 affects the Oracle Fusion Middleware Oracle HTTP Server (Core) with compromised versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker who can reach the server over HTTP to gain access that could lead to unauthorized creation, deletion or modificat...

CVE-2026-60431

The CVE-2026-60431 entry affects Oracle HTTP Server (mod_proxy) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.0.0. The issue is exploitable via unauthenticated HTTP access and may allow access to or disclosure of data; the impact is limited to the Oracle HTTP Server co...

CVE-2026-60438

CVE-2026-60438 concerns the Oracle HTTP Server component (mod_ssl) within Oracle Fusion Middleware. Affected are supported versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the server, potentially leading to creation, deletion or modificat...

CVE-2026-60454

CVE-2026-60454 affects Oracle HTTP Server (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is described as easily exploitable with a low-privilege attacker who can log on to the infrastructure where Oracle HTTP Server runs, potentially leading...