Login Request a demo
AP
Product
Apex
by Oracle · last CVE Jul 21, 2026
10
CVEs
0
On KEV
5.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities10Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-60630
5.5
0%
Jul 21
Vulnerability in Oracle APEX (component: Installation)
Affected: 24.1.0; 24.2.0; 26.1.0
CVE-2026-21931
5.4
0%
Jan 20
Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App)
Affected: 23.2.0; 23.2.1; 24.1.0; 24.2.1
CVE-2026-60156
5.3
0%
Jul 21
Vulnerability in Oracle APEX (component: General)
Affected: 24.1.0; 24.2.0; 26.1.0
CVE-2007-3854
–
3%
Jul 18
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the…
Affected: 1.5.0; 1.6.1; 2.0; 2.2
CVE-2007-3860
–
2%
Jul 18
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack…
Affected: through 3.0.0.00.20; 2.2.0.00.32
CVE-2006-7138
–
1%
Mar 7
SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute…
Affected: through 2.1
CVE-2006-7158
–
1%
Mar 7
Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via…
Affected: through 2.2
CVE-2006-5599
–
2%
Oct 28
Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the…
Affected: 2.2
CVE-2006-5351
–
2%
Oct 18
Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln# (1) APEX01, (2)…
Affected: 1.5.0; 2.0
CVE-2006-5352
–
3%
Oct 18
Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2) APEX20, and (3) APEX21
Affected: 1.5.0; 1.6.1
Showing 10