AS
Product
Application Server Web Cache
15
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Application Server Web Cache to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-1382 | – | May 3 | The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cache_dump_file parameter Affected: All versions, or not specified |
| CVE-2005-1381 | – | May 3 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Webcache 9i allow remote attackers to inject arbitrary web script or HTML via the (1) cache_dump_file or (2)… Affected: All versions, or not specified |
| CVE-2004-0385 | – | Jun 1 | Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long… Affected: 9.0.0.4.0; 9.0.2.3.0; 9.0.3.1.0; 9.0.4.0.0 |
| CVE-2002-0561 | – | Jul 3 | The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0562 | – | Jul 3 | The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0559 | – | Jul 3 | Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0560 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature,… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0563 | – | Jul 3 | The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0564 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0565 | – | Jul 3 | Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0566 | – | Jul 3 | PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-1641 | – | May 27 | Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.3 |
| CVE-2002-0102 | – | Mar 25 | Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters,… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2; 2.0.0.2 |
| CVE-2002-0103 | – | Mar 25 | An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1)… Affected: 2.0.0.0; 2.0.0.1; 2.0.0.2 |
| CVE-2001-0836 | – | Dec 6 | Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request Affected: 2.0.0.1 |
Showing 15