Oracle

Application Express

47 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2019-11358

Exploit
  • EPSS 2.4%
  • Veröffentlicht 20.04.2019 00:29:00
  • Zuletzt bearbeitet 21.11.2024 04:20:56

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the n...

6.1

CVE-2018-2699

  • EPSS 0.46%
  • Veröffentlicht 18.01.2018 02:29:23
  • Zuletzt bearbeitet 21.11.2024 04:04:16

Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is Prior to 5.1.4.00.08. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

6.1

CVE-2016-7103

Exploit
  • EPSS 1.38%
  • Veröffentlicht 15.03.2017 16:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

5.8

CVE-2016-3467

  • EPSS 0.96%
  • Veröffentlicht 21.07.2016 10:12:20
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.

6.1

CVE-2016-3448

  • EPSS 0.34%
  • Veröffentlicht 21.07.2016 10:12:12
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.

5.5

CVE-2008-1811

  • EPSS 0.77%
  • Veröffentlicht 16.04.2008 10:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 C...

10

CVE-2008-1822

  • EPSS 0.93%
  • Veröffentlicht 16.04.2008 10:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02.