Apex (Oracle) - vulnerabilities (CVEs)
11 CVEs, 1 in the last 30 days, 17 known versions, newest CVE from 2026-10-20. Vendor: Oracle.
CVEs of Apex
- CVE-2026-101521 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily…
- CVE-2026-60630 - CVSS 5.5 (medium), 2026-07-21: Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows…
- CVE-2026-60156 - CVSS 5.3 (medium), 2026-07-21: Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows…
- CVE-2026-21931 - CVSS 5.4 (medium), 2026-01-20: Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App). Supported versions that are affected are…
- CVE-2007-3854 - CVSS 5.5 (medium), 2007-07-18: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1)…
- CVE-2007-3860 - CVSS 7.5 (high), 2007-07-18: Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact…
- CVE-2006-7158 - CVSS 4.3 (medium), 2007-03-07: Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary…
- CVE-2006-7138 - CVSS 6 (medium), 2007-03-07: SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote…
- CVE-2006-5599 - CVSS 4.3 (medium), 2006-10-28: Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web…
- CVE-2006-5352 - CVSS 10 (critical), 2006-10-18: Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2)…
- CVE-2006-5351 - CVSS 9 (critical), 2006-10-18: Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka…
