HS
Product
Http Server
On CISA KEVExploited in the wildRansomware-linked
111
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 25High 36Medium 20Low 4
Watch
Add Http Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-5354 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and… Affected: 9.2.0.7; 10.1.0.5 |
| CVE-2006-5350 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08 Affected: 9.2.0.7 |
| CVE-2006-5349 | – | Oct 18 | Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07 Affected: 9.2.0.7 |
| CVE-2006-0435 | – | Jan 26 | Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and… Affected: 1.0.2.0; 1.0.2.1; 1.0.2.1s_for_apps; 1.0.2.2; 1.0.2.2_roll_up_2; 8.1.7; +6 more |
| CVE-2004-2115 | – | Dec 31 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1)… Affected: 8.1.7; 9.0.1; 9.2.0 |
| CVE-2004-1877 | – | Mar 30 | The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote… Affected: 8.1.7; 9.0.1; 9.2.0 |
| CVE-2002-0655 | – | Aug 12 | OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a… Affected: 9.0.1; 9.2.0 |
| CVE-2002-0659 | – | Aug 12 | The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings Affected: 9.0.1; 9.2.0 |
| CVE-2002-0656 | – | Aug 12 | Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a… Affected: 9.0.1; 9.2.0 |
| CVE-1999-1125 | – | Sep 19 | Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the… Affected: through 2.1; 1.0 |
| CVE-1999-1068 | – | Jul 23 | Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request Affected: 2.1 |