CVE-2006-3714
published 2006-07-21CVE-2006-3714: Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10.
PriorityP419medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
4.00%
89.5th percentile
Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | application_server | — | — |
| oracle | application_server | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_redhat2.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7mp2-98c4-7j2q: Unspecified vulnerability in OC4J for Oracle Application Server 10
ghsa_unreviewed·2022-05-01
CVE-2006-3714 [MEDIUM] GHSA-7mp2-98c4-7j2q: Unspecified vulnerability in OC4J for Oracle Application Server 10
Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10.
Red Hat
awstats: Cross-site scripting (XSS) vulnerability
vendor_redhat·2008-06-23·CVSS 2.6
CVE-2008-3714 [LOW] CWE-79 awstats: Cross-site scripting (XSS) vulnerability
awstats: Cross-site scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the query_string, a different vulnerability than CVE-2006-3681 and CVE-2006-1945.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securitytracker.com/id?1016529http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.securityfocus.com/archive/1/440758/100/100/threadedhttp://www.securityfocus.com/bid/19054http://www.us-cert.gov/cas/techalerts/TA06-200A.htmlhttp://www.vupen.com/english/advisories/2006/2863http://www.vupen.com/english/advisories/2006/2947https://exchange.xforce.ibmcloud.com/vulnerabilities/27897http://secunia.com/advisories/21111http://secunia.com/advisories/21165http://securitytracker.com/id?1016529http://www.oracle.com/technetwork/topics/security/cpujul2006-101315.htmlhttp://www.red-database-security.com/advisory/oracle_cpu_july_2006.htmlhttp://www.securityfocus.com/archive/1/440758/100/100/threadedhttp://www.securityfocus.com/bid/19054http://www.us-cert.gov/cas/techalerts/TA06-200A.htmlhttp://www.vupen.com/english/advisories/2006/2863http://www.vupen.com/english/advisories/2006/2947https://exchange.xforce.ibmcloud.com/vulnerabilities/27897
2006-07-21
Published