Oracle Application Server vulnerabilities
193 known vulnerabilities affecting oracle/application_server.
Total CVEs
193
CISA KEV
0
Public exploits
18
Exploited in wild
0
Severity breakdown
CRITICAL55HIGH49MEDIUM74LOW15
Vulnerabilities
Page 5 of 10
CVE-2005-3452P4CRITICALCVSS 10.0v1.0v1.0.2.2+5 more2005-11-02
CVE-2005-3452 [CRITICAL] CVE-2005-3452: Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown im
Unspecified vulnerability in Web Cache in Oracle Application Server 1.0 up to 9.0.4.2 has unknown impact and attack vectors, as identified by Oracle Vuln# AS13.
nvd
CVE-2005-3450P4CRITICALCVSS 10.0v1.0v1.0.2.2+2 more2005-11-02
CVE-2005-3450 [CRITICAL] CVE-2005-3450: Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unkn
Unspecified vulnerability in the HTTP Server in Oracle Application Server 1.0 up to 9.0.2.3 has unknown impact and attack vectors, as identified by Oracle Vuln# AS04.
nvd
CVE-2006-1884P4CRITICALCVSS 10.0v1.0.2.2v9.0.4.1+6 more2006-04-20
CVE-2006-1884 [CRITICAL] CVE-2006-1884: Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business S
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
nvd
CVE-2006-5366P4CRITICALCVSS 10.0v9.0.4.22006-10-18
CVE-2006-5366 [CRITICAL] CVE-2006-5366: Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and r
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln# OC4J01, and (2) Oracle Process Mgmt & Notification, aka OPMN01.
nvd
CVE-2007-2121P4CRITICALCVSS 10.0v7.0.4.42007-04-18
CVE-2007-2121 [CRITICAL] CVE-2007-2121: Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has un
Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02.
nvd
CVE-2007-2123P4CRITICALCVSS 10.0v9.0.4.3v10.1.2.0.0+4 more2007-04-18
CVE-2007-2123 [CRITICAL] CVE-2007-2123: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04.
nvd
CVE-2002-1630P4HIGHCVSS 7.5v1.0.2v1.0.2.1s+3 more2002-12-31
CVE-2002-1630 [HIGH] CVE-2002-1630: The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
nvd
CVE-2006-0274P4CRITICALCVSS 10.0v9.0.4.2v10.1.2.0.22006-01-18
CVE-2006-0274 [CRITICAL] CVE-2006-0274: Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0
Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP03.
nvd
CVE-2006-3710P4CRITICALCVSS 10.0v9.0.2.3v9.0.3.1+2 more2006-07-21
CVE-2006-3710 [CRITICAL] CVE-2006-3710: Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2) AS08.
nvd
CVE-2008-2589P4MEDIUMCVSS 6.4v9.0.4.3v10.1.2.2+1 more2008-07-15
CVE-2008-2589 [MEDIUM] CVE-2008-2589: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this issue is a SQL injection vulnerability in the WWV_RENDER_
nvd
CVE-2007-0222P4MEDIUMCVSS 5.0v10.1.32007-01-17
CVE-2007-0222 [MEDIUM] CVE-2007-0222: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Se
Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files via unknown vectors, probably "\.." sequences in the beanId parameter. NOTE: this is likely a duplicate of another CVE that Oracle addressed in CPU Jan 2007, but due to lack of details by Oracle, it is un
nvd
CVE-2006-5356P4CRITICALCVSS 10.0v9.0.4.3v10.1.2.0.2+1 more2006-10-18
CVE-2006-5356 [CRITICAL] CVE-2006-5356: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4
Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02.
nvd
CVE-2007-0280P4HIGHCVSS 7.5v9.0.4.3v10.1.2.0.2+1 more2007-01-17
CVE-2007-0280 [HIGH] CVE-2007-0280: Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.
Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and attack vectors related to the Oracle Process Mgmt & Notification component, aka OPMN01. NOTE: as of 20070123, Oracle has not disputed claims by a reliable researcher that OP
nvd
CVE-2005-3446P4CRITICALCVSS 10.0v9.0.2.3v9.0.3.1+3 more2005-11-02
CVE-2005-3446 [CRITICAL] CVE-2005-3446: Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Appli
Unspecified vulnerability in Internet Directory in Oracle Database Server 9i up to 9.2.0.6 and Application Server 9.0.2.3 up to 10.1.2.0 has unknown impact and attack vectors, aka Oracle Vuln# DB32 and AS06.
nvd
CVE-2001-0326P4HIGHCVSS 7.5vrelease_1.0.2.0.12001-05-03
CVE-2001-0326 [HIGH] CVE-2001-0326: Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2
Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the > FilePermission.
nvd
CVE-2006-0273P4CRITICALCVSS 10.0v9.0.4.2v10.1.2.02006-01-18
CVE-2006-0273 [CRITICAL] CVE-2006-0273: Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0
Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01.
nvd
CVE-2006-5358P4CRITICALCVSS 10.0v9.0.4.3v10.1.2.0.22006-10-18
CVE-2006-5358 [CRITICAL] CVE-2006-5358: Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln# FORM01.
nvd
CVE-2006-5362P4CRITICALCVSS 10.0v10.1.3.0.02006-10-18
CVE-2006-5362 [CRITICAL] CVE-2006-5362: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.
Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04.
nvd
CVE-2006-5360P4CRITICALCVSS 10.0v9.0.4.22006-10-18
CVE-2006-5360 [CRITICAL] CVE-2006-5360: Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln# FORM03.
nvd
CVE-2008-0343P4CRITICALCVSS 10.0v1.0.2.2v9.0.4.3+6 more2008-01-17
CVE-2008-0343 [CRITICAL] CVE-2008-0343: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8,
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote attack vectors, aka DB06.
nvd