AS
Product
Application Server
198
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1363 | 9.8 | Aug 4 | Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check… Affected: 9.0.2; 9.0.2.0.0; 9.0.2.0.1; 9.0.2.1; 9.0.2.2; 9.0.2.3; +5 more |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: 12.1.3 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 0.9.8; 1.0.0; 1.0.1 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 0.9.8; 1.0.0; 1.0.1 |
| CVE-2010-0070 | – | Jan 13 | Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect integrity via unknown… Affected: 10.1.2.3; 10.1.3.4 |
| CVE-2010-0067 | – | Jan 13 | Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via… Affected: 10.1.2.3; 10.1.3.4 |
| CVE-2010-0066 | – | Jan 13 | Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown… Affected: 7.0.4.3; 10.1.4.2 |
| CVE-2009-3412 | – | Jan 13 | Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local users to affect… Affected: 10.1.2.3 |
| CVE-2009-3407 | – | Oct 22 | Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different… Affected: 10.1.2.3; 10.1.4.2 |
| CVE-2009-1999 | – | Oct 22 | Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity… Affected: All versions, or not specified |
| CVE-2009-1990 | – | Oct 22 | Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via… Affected: 10.1.3.4.1 |
| CVE-2008-7237 | – | Sep 14 | Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality… Affected: 9.0.4.3; 10.1.2.2 |
| CVE-2008-7236 | – | Sep 14 | Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to affect integrity via unknown vectors,… Affected: 10.1.2.2; 10.1.3.1 |
| CVE-2008-7235 | – | Sep 14 | Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect integrity via unknown… Affected: 10.1.2.2 |
| CVE-2008-7234 | – | Sep 14 | Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality,… Affected: 10.1.2.2; 10.1.3.3 |
| CVE-2008-7233 | – | Sep 14 | Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows remote attackers to affect… Affected: 1.1.8.26 |
| CVE-2009-1976 | – | Jul 14 | Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors Affected: 10.1.2.3 |
| CVE-2009-0217 | – | Jul 14 | The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in… Affected: 10.1.2.3; 10.1.3.4; 10.1.4.3im |
| CVE-2009-1017 | – | Apr 15 | Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect… Affected: 5.6.2; 10.1.3.2.1; 10.1.3.3.3; 10.1.3.4 |
| CVE-2009-1011 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and… Affected: 8.2.2; 8.3.0 |
| CVE-2009-1010 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and… Affected: 8.2.2; 8.3.0 |
| CVE-2009-1009 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability,… Affected: 8.1.9 |
| CVE-2009-1008 | – | Apr 15 | Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and… Affected: 8.2.2; 8.3.0 |
| CVE-2009-0996 | – | Apr 15 | Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect… Affected: 10.1.3.2.1; 10.1.3.3.3; 10.1.3.4 |
| CVE-2009-0994 | – | Apr 15 | Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect… Affected: 5.6.2; 10.1.3.2.1; 10.1.3.3.3; 10.1.3.4 |
| CVE-2009-0993 | – | Apr 15 | Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown… Affected: 10.1.2.3.0 |
| CVE-2009-0990 | – | Apr 15 | Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality… Affected: 5.6.2; 10.1.3.2.1; 10.1.3.3.3 |
| CVE-2009-0989 | – | Apr 15 | Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality… Affected: 5.6.2; 10.1.3.2.1; 10.1.3.3.3 |
| CVE-2009-0983 | – | Apr 15 | Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different… Affected: 10.1.2.3.0; 10.1.4.2.0 |
| CVE-2009-0974 | – | Apr 15 | Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different… Affected: 10.1.2.3.0; 10.1.4.2.0 |
| CVE-2008-5438 | – | Jan 14 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors Affected: 10.1.2.3.0; 10.1.4.2.0 |
| CVE-2008-4017 | – | Jan 14 | Unspecified vulnerability in the OC4J component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality via unknown vectors Affected: 10.1.2.3 |
| CVE-2008-4014 | – | Jan 14 | Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect confidentiality and integrity via… Affected: 1.0; 1.0.2; 1.0.2.0; 1.0.2.1; 1.0.2.1s; 1.0.2.2; +34 more |
| CVE-2008-3987 | – | Oct 14 | Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors Affected: 10.1.2.3 |
| CVE-2008-3986 | – | Oct 14 | Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via… Affected: 9.0.4.3; 10.1.2.2 |
| CVE-2008-3977 | – | Oct 14 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a… Affected: 9.0.4.3; 10.1.2.3 |
| CVE-2008-3975 | – | Oct 14 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a… Affected: 9.0.4.3; 10.1.2.3 |
| CVE-2008-2619 | – | Oct 14 | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite 11.5.10.2, allows remote… Affected: 1.0.2.2; 9.0.4.3; 10.1.2.2 |
| CVE-2008-2614 | – | Jul 15 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors Affected: 9.0.4.3; 10.1.3.3 |
| CVE-2008-2609 | – | Jul 15 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors Affected: 9.0.4.3 |
| CVE-2008-2593 | – | Jul 15 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability… Affected: 10.1.2.3.0; 10.1.4.2.0 |
| CVE-2008-2589 | – | Jul 15 | Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors Affected: 9.0.4.3; 10.1.2.2; 10.1.4.1 |
| CVE-2008-2583 | – | Jul 15 | Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown… Affected: All versions, or not specified |
| CVE-2008-1812 | – | Apr 16 | Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and… Affected: 9.0.4.3 |
| CVE-2008-1824 | – | Apr 16 | Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact and remote attack… Affected: 9.0.4.3; 10.1.2.2; 10.1.3.3 |
| CVE-2008-1814 | – | Apr 16 | Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application… Affected: 9.0.4.3; 10.1.2.2 |
| CVE-2008-0346 | – | Jan 17 | Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka… Affected: 1.0.2.2; 9.0.4.3; 10.1.2.0.2; 10.1.2.1.0; 10.1.2.2.0; 10.1.3.0.0; +2 more |
| CVE-2008-0345 | – | Jan 17 | Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08 Affected: 1.0.2.2; 9.0.4.3; 10.1.2.0.2; 10.1.2.1.0; 10.1.2.2.0; 10.1.3.0.0; +2 more |
| CVE-2008-0344 | – | Jan 17 | Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07 Affected: 1.0.2.2; 9.0.4.3; 10.1.2.0.2; 10.1.2.1.0; 10.1.2.2.0; 10.1.3.0.0; +2 more |
| CVE-2008-0343 | – | Jan 17 | Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06 Affected: 1.0.2.2; 9.0.4.3; 10.1.2.0.2; 10.1.2.1.0; 10.1.2.2.0; 10.1.3.0.0; +2 more |