Oracle

Application Express

47 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2019-11358

Exploit
  • EPSS 2.4%
  • Published 20.04.2019 00:29:00
  • Last modified 21.11.2024 04:20:56

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the n...

6.1

CVE-2018-2699

  • EPSS 0.46%
  • Published 18.01.2018 02:29:23
  • Last modified 21.11.2024 04:04:16

Vulnerability in the Application Express component of Oracle Database Server. The supported version that is affected is Prior to 5.1.4.00.08. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ...

6.1

CVE-2016-7103

Exploit
  • EPSS 1.38%
  • Published 15.03.2017 16:59:00
  • Last modified 20.04.2025 01:37:25

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

5.8

CVE-2016-3467

  • EPSS 0.96%
  • Published 21.07.2016 10:12:20
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.

6.1

CVE-2016-3448

  • EPSS 0.34%
  • Published 21.07.2016 10:12:12
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect confidentiality and integrity via unknown vectors.

5.5

CVE-2008-1811

  • EPSS 0.77%
  • Published 16.04.2008 10:05:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 C...

10

CVE-2008-1822

  • EPSS 0.93%
  • Published 16.04.2008 10:05:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02.