Oracle

Application Server Portal

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2008-2138

Exploit
  • EPSS 42.38%
  • Veröffentlicht 12.05.2008 16:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing "%0A" (encoded line feed), then using the session I...

4.3

CVE-2007-1506

  • EPSS 11.39%
  • Veröffentlicht 19.03.2007 22:19:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.

5

CVE-2006-6699

  • EPSS 0.46%
  • Veröffentlicht 23.12.2006 01:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) calendarDial...

7.5

CVE-2006-6697

  • EPSS 38.3%
  • Veröffentlicht 22.12.2006 02:28:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.

7.2

CVE-2004-1707

Exploit
  • EPSS 12.3%
  • Veröffentlicht 30.07.2004 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root ...

7.5

CVE-2003-1193

  • EPSS 0.43%
  • Veröffentlicht 03.11.2003 05:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary ...