Reports (Oracle) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2005-09-20. Vendor: Oracle.

CVEs of Reports

• CVE-2005-2983 - CVSS 7.5 (high), 2005-09-20: SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the values in the…
• CVE-2005-2379 - CVSS 4.3 (medium), 2005-07-26: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug…
• CVE-2005-2378 - CVSS 5 (medium), 2005-07-26: Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or…
• CVE-2005-2371 - CVSS 5 (medium), 2005-07-26: Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive…
• CVE-2002-1089 - CVSS 5 (medium), 2002-10-04: rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use…
• CVE-2002-0947 - CVSS 7.5 (high), 2002-10-04: Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to…