AS
Product
Application Server
198
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-5361 | – | Oct 18 | Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has… Affected: 9.0.4.3; 10.1.2.0.2; 10.1.2.1.0 |
| CVE-2006-5362 | – | Oct 18 | Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04 Affected: 10.1.3.0.0 |
| CVE-2006-5363 | – | Oct 18 | Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors,… Affected: 10.1.2.0.1 |
| CVE-2006-5364 | – | Oct 18 | Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and… Affected: 9.0.4.1; 10.1.2.0.2 |
| CVE-2006-5365 | – | Oct 18 | Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote… Affected: 9.0.4.3; 10.1.2.0.2 |
| CVE-2006-5366 | – | Oct 18 | Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln#… Affected: 9.0.4.2 |
| CVE-2006-3706 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01 Affected: 9.0.2.3 |
| CVE-2006-3714 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10 Affected: 10.1.2.0.2; 10.1.2.1 |
| CVE-2006-3713 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 10.1.3.0 has unknown impact and attack vectors, aka Oracle Vuln# AS09 Affected: 10.1.3.0 |
| CVE-2006-3712 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.4.2 and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS07 Affected: 9.0.4.2; 10.1.2.0.0 |
| CVE-2006-3711 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 9.0.4.1 has unknown impact and attack vectors, aka Oracle Vuln# AS06 Affected: 9.0.2.3; 9.0.3.1; 9.0.4.1 |
| CVE-2006-3710 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2)… Affected: 9.0.2.3; 9.0.3.1; 9.0.4.2; 10.1.2.0.0 |
| CVE-2006-3709 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS04 Affected: 9.0.2.3; 9.0.3.1; 10.1.2.0.0 |
| CVE-2006-3708 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03 Affected: 9.0.2.3; 9.0.3.1; 9.0.4.2; 10.1.2.0.1; 10.1.2.0.2 |
| CVE-2006-3707 | – | Jul 21 | Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 and 9.0.3.1 has unknown impact and attack vectors, aka Oracle Vuln# AS02 Affected: 9.0.2.3; 9.0.3.1 |
| CVE-2006-1884 | – | Apr 20 | Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka… Affected: 1.0.2.2; 9.0.4.1; 9.0.4.2; 10.1.2.0.0; 10.1.2.0.1; 10.1.2.0.2; +2 more |
| CVE-2006-0586 | – | Feb 8 | Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute arbitrary SQL commands via multiple parameters in (1)… Affected: 10.1.0.2; 10.1.0.3; 10.1.0.3.1; 10.1.0.4; 10.1.2; 10.1.2.0.1; +2 more |
| CVE-2006-0552 | – | Feb 4 | Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as… Affected: 1.0.2.2; 1.0.2.2; 9.0.4; 9.0.4.1; 9.0.4.2; 10.1.2; +6 more |
| CVE-2006-0435 | – | Jan 26 | Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and… Affected: 1.0.2; 1.0.2.0; 1.0.2.1; 1.0.2.1s; 1.0.2.2; 1.0.2.2.2; +21 more |
| CVE-2006-0274 | – | Jan 18 | Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by… Affected: 9.0.4.2; 10.1.2.0.2 |
| CVE-2006-0291 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and… Affected: 9.0.4.2; 10.1.2.1.0 |
| CVE-2006-0290 | – | Jan 18 | Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business… Affected: 9.0.4.2; 10.1.2.1 |
| CVE-2006-0289 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as… Affected: 6.0.8.26_ps17 |
| CVE-2006-0288 | – | Jan 18 | Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10 have unspecified… Affected: 9.0.4.1 |
| CVE-2006-0287 | – | Jan 18 | Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as… Affected: 10.1.2.0.2 |
| CVE-2006-0286 | – | Jan 18 | Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and… Affected: 1.0.2.2; 9.0.4.2; 10.1.2.0.2 |
| CVE-2006-0285 | – | Jan 18 | Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and… Affected: 1.0.2.2; 9.0.4.2; 10.1.2.0.2 |
| CVE-2006-0284 | – | Jan 18 | Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack… Affected: 9.0.4.2; 10.1.2.0.2 |
| CVE-2006-0283 | – | Jan 18 | Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact… Affected: 10.1.2.0.2 |
| CVE-2006-0282 | – | Jan 18 | Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, and Collaboration… Affected: 1.0.2.2; 9.0.4.2; 10.1.2.0.2; 10.1.2.0.2 |
| CVE-2006-0275 | – | Jan 18 | Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln#… Affected: 9.0.4.2 |
| CVE-2006-0273 | – | Jan 18 | Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01 Affected: 9.0.4.2; 10.1.2.0 |
| CVE-2005-3445 | – | Nov 2 | Multiple unspecified vulnerabilities in HTTP Server in Oracle Database Server 8i up to 10.1.0.4.2 and Application Server 1.0.2.2 up to 10.1.2.0 have unknown impact and attack… Affected: 1.0.2.2; 9.0.2.3; 9.0.3.1; 9.0.4.1; 9.0.4.2; 10.1.2.0.0; +2 more |
| CVE-2005-3453 | – | Nov 2 | Multiple unspecified vulnerabilities in Web Cache in Oracle Application Server 1.0 up to 10.1.2.0 has unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS12 and… Affected: 1.0; 1.0.2.2; 9.0; 9.0.2.3; 9.0.3.1; 9.0.4.1; +2 more |
| CVE-2005-3452 | – | Nov 2 | Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS13 Affected: 1.0; 1.0.2.2; 9.0; 9.0.2.3; 9.0.3.1; 9.0.4.1; +1 more |
| CVE-2005-3451 | – | Nov 2 | Unspecified vulnerability in SQL*ReportWriter in Oracle Application Server 9.0 up to 9.0.2.1 has unknown impact and attack vectors, as identified by Oracle Vuln# AS10 Affected: 9.0; 9.0.2.1 |
| CVE-2005-3450 | – | Nov 2 | Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04 Affected: 1.0; 1.0.2.2; 9.0.2.3; 9.0.3.1 |
| CVE-2005-3449 | – | Nov 2 | Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers… Affected: 9.0; 9.0.2.3; 9.0.3.1; 9.0.4.1; 9.0.4.2; 10.1.2.0.0; +2 more |
| CVE-2005-3448 | – | Nov 2 | Unspecified vulnerability in the OC4J Module in Oracle Application Server 9.0 up to 10.1.2.0.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS01 Affected: 9.0; 9.0.2.3; 9.0.3.1; 9.0.4.1; 9.0.4.2; 10.1.2.0.0; +2 more |
| CVE-2005-3446 | – | Nov 2 | Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka… Affected: 9.0.2.3; 9.0.3.1; 9.0.4.1; 9.0.4.2; 10.1.2.0.0 |
| CVE-2005-3204 | – | Oct 14 | Cross-site scripting (XSS) vulnerability in Oracle XML DB 9iR2 allows remote attackers to inject arbitrary web script or HTML via the query string in an HTTP request Affected: 9.0.2; 9.0.2.0.0; 9.0.2.0.1; 9.0.2.1; 9.0.2.2; 9.0.2.3; +3 more |
| CVE-2005-2093 | – | Jul 5 | Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP… Affected: 9.0.2 |
| CVE-2005-1495 | – | May 11 | Oracle Database 9i and 10g disables Fine Grained Audit (FGA) after the SYS user executes a SELECT statement on an FGA object, which makes it easier for attackers to escape… Affected: 10.1.0.2; 10.1.0.3; 10.1.0.3.1 |
| CVE-2005-1496 | – | May 11 | The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user Affected: 10.1.0.2; 10.1.0.3; 10.1.0.3.1 |
| CVE-2005-1383 | – | May 3 | The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a… Affected: 10.1.0.2; 10.1.0.3; 10.1.0.3.1; 10.1.2 |
| CVE-2004-2244 | – | Dec 31 | The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and… Affected: 1.0.2.2; 1.0.2.2.2; 9.0.3; 9.0.3.1 |
| CVE-2004-1774 | – | Aug 31 | Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via… Affected: 10.1.0.2 |
| CVE-2004-1367 | – | Aug 4 | Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the… Affected: 9.0.2; 9.0.2.0.0; 9.0.2.0.1; 9.0.2.1; 9.0.2.2; 9.0.2.3; +5 more |
| CVE-2004-1371 | – | Aug 4 | Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure Affected: 9.0.2; 9.0.2.0.0; 9.0.2.0.1; 9.0.2.1; 9.0.2.2; 9.0.2.3; +5 more |
| CVE-2004-1370 | – | Aug 4 | Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain… Affected: 9.0.2; 9.0.2.0.0; 9.0.2.0.1; 9.0.2.1; 9.0.2.2; 9.0.2.3; +5 more |