AS
Product
Application Server Portal
6
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Application Server Portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-2138 | – | May 12 | Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request… Affected: 10g |
| CVE-2007-1506 | – | Mar 19 | Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the… Affected: All versions, or not specified |
| CVE-2006-6699 | – | Dec 23 | Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response… Affected: 9.0.2 |
| CVE-2006-6697 | – | Dec 22 | CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct… Affected: 9.0.2; 10g |
| CVE-2004-1707 | – | Jul 30 | The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at… Affected: 3.0.9.8.5; 9.0.2.3; 9.0.2.3a; 9.0.2.3b |
| CVE-2003-1193 | – | Nov 3 | Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server… Affected: 3.0.9.8.5; 9.0.2.3; 9.0.2.3a; 9.0.2.3b |
Showing 6