Application Server (Oracle) - vulnerabilities (CVEs)

198 CVEs, 0 in the last 30 days, 85 known versions, newest CVE from 2020-04-21. Vendor: Oracle.

CVEs of Application Server

CVE-2020-1967 - CVSS 7.5 (high), 2020-04-21: Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a…
CVE-2018-5407 - CVSS 4.7 (medium), 2018-11-15: Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on…
CVE-2018-0735 - CVSS 5.9 (medium), 2018-10-29: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing…
CVE-2010-0070 - CVSS 4.3 (medium), 2010-01-13: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect…
CVE-2009-3412 - CVSS 1 (low), 2010-01-13: Unspecified vulnerability in the Unzip component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5; and Oracle Application Server 10.1.2.3; allows local…
CVE-2010-0067 - CVSS 5 (medium), 2010-01-13: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect…
CVE-2010-0066 - CVSS 5 (medium), 2010-01-13: Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect…
CVE-2009-3407 - CVSS 4.3 (medium), 2009-10-22: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown…
CVE-2009-1990 - CVSS 1.7 (low), 2009-10-22: Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect…
CVE-2009-1999 - CVSS 4.3 (medium), 2009-10-22: Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers…
CVE-2008-7235 - CVSS 4.3 (medium), 2009-09-14: Unspecified vulnerability in the Oracle Forms component in Oracle Application Server 10.1.2.2 and E-Business Suite 12.0.3 allows remote attackers to affect…
CVE-2008-7234 - CVSS 6.8 (medium), 2009-09-14: Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to…
CVE-2008-7237 - CVSS 4 (medium), 2009-09-14: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to…
CVE-2008-7233 - CVSS 9.3 (critical), 2009-09-14: Unspecified vulnerability in the E-Business Application client, as used in Oracle Application Server 1.1.8.26 and E-Business Suite 11.5.10.2, allows remote…
CVE-2008-7236 - CVSS 4.3 (medium), 2009-09-14: Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 and 10.1.3.1 allows remote attackers to affect integrity…
CVE-2009-1976 - CVSS 4.3 (medium), 2009-07-14: Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.
CVE-2009-0217 - CVSS 5 (medium), 2009-07-14: The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer…
CVE-2009-1011 - CVSS 4.4 (medium), 2009-04-15: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality,…
CVE-2009-1017 - CVSS 4 (medium), 2009-04-15: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated…
CVE-2009-0974 - CVSS 4.3 (medium), 2009-04-15: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown…
CVE-2009-0990 - CVSS 5.5 (medium), 2009-04-15: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to…
CVE-2009-0996 - CVSS 4 (medium), 2009-04-15: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to…
CVE-2009-1010 - CVSS 4.4 (medium), 2009-04-15: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality,…
CVE-2009-0989 - CVSS 5.5 (medium), 2009-04-15: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to…
CVE-2009-0994 - CVSS 4 (medium), 2009-04-15: Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated…
CVE-2009-1009 - CVSS 4.4 (medium), 2009-04-15: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity,…
CVE-2009-0983 - CVSS 4.3 (medium), 2009-04-15: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown…
CVE-2009-0993 - CVSS 7.5 (high), 2009-04-15: Unspecified vulnerability in the OPMN component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality, integrity, and…
CVE-2009-1008 - CVSS 4.4 (medium), 2009-04-15: Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality,…
CVE-2008-4014 - CVSS 5.5 (medium), 2009-01-14: Unspecified vulnerability in the Oracle BPEL Process Manager component in Oracle Application Server allows remote authenticated users to affect…
CVE-2008-5438 - CVSS 4.3 (medium), 2009-01-14: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via…
CVE-2008-4017 - CVSS 5 (medium), 2009-01-14: Unspecified vulnerability in the OC4J component in Oracle Application Server 10.1.2.3 allows remote attackers to affect confidentiality via unknown vectors.
CVE-2008-3987 - CVSS 1 (low), 2008-10-14: Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via…
CVE-2008-3986 - CVSS 1 (low), 2008-10-14: Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect…
CVE-2008-3977 - CVSS 5 (medium), 2008-10-14: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via…
CVE-2008-3975 - CVSS 5 (medium), 2008-10-14: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via…
CVE-2008-2619 - CVSS 1.7 (low), 2008-10-14: Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Business Suite…
CVE-2008-2583 - CVSS 4.3 (medium), 2008-07-15: Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before…
CVE-2008-2609 - CVSS 6.4 (medium), 2008-07-15: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack…
CVE-2008-2593 - CVSS 4.3 (medium), 2008-07-15: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a…
CVE-2008-2589 - CVSS 6.4 (medium), 2008-07-15: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.4.1 has unknown impact and remote attack…
CVE-2008-2614 - CVSS 4.3 (medium), 2008-07-15: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote…
CVE-2008-1812 - CVSS 10 (critical), 2008-04-16: Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for…
CVE-2008-1824 - CVSS 10 (critical), 2008-04-16: Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact…
CVE-2008-1814 - CVSS 9 (critical), 2008-04-16: Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and…
CVE-2008-0344 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vectors, aka DB07.
CVE-2008-0347 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0.3; and Application…
CVE-2008-0343 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown impact and remote…
CVE-2008-0346 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknown impact and…
CVE-2008-0349 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has unknown impact and…
CVE-2008-0340 - CVSS 10 (critical), 2008-01-17: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack…
CVE-2008-0345 - CVSS 10 (critical), 2008-01-17: Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.
CVE-2008-0348 - CVSS 10 (critical), 2008-01-17: Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48.15, and 8.49.07…
CVE-2007-5517 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2 and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown…
CVE-2007-5520 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3,…
CVE-2007-5523 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and…
CVE-2007-5526 - CVSS 10 (critical), 2007-10-17: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has…
CVE-2007-5516 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Process Mgmt & Notification component in Oracle Application Server 10.1.3.3 has unknown impact and remote attack…
CVE-2007-5519 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown…
CVE-2007-5522 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, aka AS07.
CVE-2007-5525 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration…
CVE-2007-5518 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.
CVE-2007-5521 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and…
CVE-2007-5524 - CVSS 7.5 (high), 2007-10-17: Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite…
CVE-2007-5531 - CVSS 10 (critical), 2007-10-17: Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown…
CVE-2007-3862 - CVSS 7.5 (high), 2007-07-18: Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle Single Sign On, aka…
CVE-2007-3861 - CVSS 7.5 (high), 2007-07-18: Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent attackers to have…
CVE-2007-3859 - CVSS 7.5 (high), 2007-07-18: Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and…
CVE-2007-3863 - CVSS 7.5 (high), 2007-07-18: Unspecified vulnerability in Oracle JDeveloper for Application Server 10.1.2.2 and 10.1.3.1, and Collaboration Suite 10.1.2, allows context-dependent…
CVE-2007-3854 - CVSS 5.5 (medium), 2007-07-18: Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1)…
CVE-2007-3553 - CVSS 4.3 (medium), 2007-07-03: Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbitrary web script…
CVE-2007-2120 - CVSS 7.8 (high), 2007-04-18: The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via…
CVE-2007-2123 - CVSS 10 (critical), 2007-04-18: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown…
CVE-2007-2119 - CVSS 6.8 (medium), 2007-04-18: Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database…
CVE-2007-2122 - CVSS 10 (critical), 2007-04-18: Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03.
CVE-2007-2130 - CVSS 9 (critical), 2007-04-18: Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2;…
CVE-2007-2121 - CVSS 10 (critical), 2007-04-18: Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS02.
CVE-2007-2124 - CVSS 10 (critical), 2007-04-18: Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka AS05.
CVE-2007-1609 - CVSS 4.3 (medium), 2007-03-22: Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote…
CVE-2007-0286 - CVSS 2.6 (low), 2007-01-17: Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attack vectors related…
CVE-2007-0289 - CVSS 6.4 (medium), 2007-01-17: Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2EE, aka…
CVE-2007-0275 - CVSS 3.5 (low), 2007-01-17: Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component, as used in Oracle Database 9.2.0.8,…
CVE-2007-0282 - CVSS 3.2 (low), 2007-01-17: Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unknown impact and…
CVE-2007-0285 - CVSS 5 (medium), 2007-01-17: Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suite and…
CVE-2007-0288 - CVSS 1.7 (low), 2007-01-17: Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, aka OID01.
CVE-2007-0281 - CVSS 5 (medium), 2007-01-17: Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.1,…
CVE-2007-0284 - CVSS 6.4 (medium), 2007-01-17: Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and attack…
CVE-2007-0287 - CVSS 1.7 (low), 2007-01-17: Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has unknown impact and…
CVE-2007-0280 - CVSS 7.5 (high), 2007-01-17: Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.0.4.2 and…
CVE-2007-0283 - CVSS 4 (medium), 2007-01-17: Unspecified vulnerability in Oracle Application Server 9.0.4.3 and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related to Oracle…
CVE-2007-0222 - CVSS 5 (medium), 2007-01-17: Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrary files…
CVE-2006-5359 - CVSS 10 (critical), 2006-10-18: Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite…
CVE-2006-5362 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka…
CVE-2006-5365 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown…
CVE-2006-5355 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and…
CVE-2006-5358 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka…
CVE-2006-5361 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite…
CVE-2006-5364 - CVSS 2.1 (low), 2006-10-18: Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has…
CVE-2006-5354 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration…
CVE-2006-5357 - CVSS 10 (critical), 2006-10-18: Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote…