Application Server Portal (Oracle) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2008-05-12. Vendor: Oracle.

CVEs of Application Server Portal

• CVE-2008-2138 - CVSS 5 (medium), 2008-05-12: Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by…
• CVE-2007-1506 - CVSS 4.3 (medium), 2007-03-19: Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web…
• CVE-2006-6699 - CVSS 5 (medium), 2006-12-23: Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct…
• CVE-2006-6697 - CVSS 7.5 (high), 2006-12-22: CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP…
• CVE-2004-1707 - CVSS 7.2 (high), 2004-07-30: The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files…
• CVE-2003-1193 - CVSS 7.5 (high), 2003-11-03: Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle…