CVSS: 6.8EPSS: 7%CPEs: 6EXPL: 0CVE-2007-2119
https://notcve.org/view.php?id=CVE-2007-2119
Cross-site scripting (XSS) vulnerability in boundary_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTML or web script via the EXPTYPE parameter, aka SES01. Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en boundary_rules.jsp en el Administration Front End para Oracle Enterprise (Ultra) Search, utilizado en Database Server 9.2.0.8, 10.1.0.5, y 10.2.0.2, y en Application Server 9.0.4.3, 10.1.2.0.2, y 10.1.2.2.0 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro EXTYPE, también conocido como SES01. • http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.red-database-security.com/advisory/oracle_css_ses.html http://www.securityfocus.com/archive/1/466156/100/0/threaded http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus.com/bid/23532 http://www.securitytracker.com/id?1017927 http://www.us-cert.gov/cas/techalerts/TA07-108A.html http://www&# •
CVSS: 7.8EPSS: 24%CPEs: 3EXPL: 0CVE-2007-2120
https://notcve.org/view.php?id=CVE-2007-2120
The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracle TNS Listener via a TNS STOP command in a request that uses the database/TNS alias, aka AS01. El Servlet Discoverer de Oracle en Oracle Application Server versiones 9.0.4.3, 10.1.2.0.2 y 10.1.2.2.0 permite a los atacantes remotos cerrar un TNS listener de Oracle por medio de un comando TNS STOP de una petición que utiliza el alias database/TNS. también se conoce como AS01. • http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.red-database-security.com/advisory/oracle_discoverer_servlet.html http://www.securityfocus.com/archive/1/466160/100/0/threaded http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus.com/bid/23532 http://www.securitytracker.com/id?1017927 http://www.us-cert.gov/cas/techalerts/TA07-108A.html http:/ • CWE-399: Resource Management Errors •
CVSS: 9.0EPSS: 1%CPEs: 7EXPL: 0CVE-2007-2130
https://notcve.org/view.php?id=CVE-2007-2130
Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4.3 and 10.1.2.0.2; Collaboration Suite 10.1.2; and E-Business Suite; has unknown impact and remote authenticated attack vectors, aka OWF01. Vulnerabilidad no especificada en Workflow Cartridge, tal y como se usa en Oracle Database Server 9.2.0.1, 10.1.0.2, y 10.2.0.1; Application Server 9.0.4.3 y 10.1.2.0.2; Collaboration Suite 10.1.2; y E-Business Suite; tienen un impacto desconocido y vectores de ataque remotos autenticados, también conocido como OWF01. • http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus.com/bid/23532 http://www.securitytracker.com/id?1017927 http://www.us-cert.gov/cas/techalerts/TA07-108A.html http://www.vupen.com/english/advisories/2007/1426 •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2007-2123
https://notcve.org/view.php?id=CVE-2007-2123
Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 has unknown impact and attack vectors, aka AS04. Vulnerabilidad no especificada en el componente Portal en Oracle Application Server 10.1.3 hasta la 10.1.3.2.0, 10.1.2 hasta la 10.1.2.2.0, y 9.0.4.3 tiene un impacto desconocido y vectores de ataque, también conocido como AS04. • http://www.oracle.com/technetwork/topics/security/cpuapr2007-090632.html http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securityfocus.com/archive/1/466329/100/200/threaded http://www.securityfocus.com/bid/23532 http://www.securitytracker.com/id?1017927 http://www.us-cert.gov/cas/techalerts/TA07-108A.html http://www.vupen.com/english/advisories/2007/1426 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2007-1609
https://notcve.org/view.php?id=CVE-2007-1609
Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en servlet/Spy de Dynamic Monitoring Services (DMS) en Oracle Application Server (OAS) 10g 10.1.2.0.0 permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro table. NOTA: Esta vulnerabilidad puede estar relacionada con CVE-2002-0563. • http://secunia.com/advisories/24554 http://securityreason.com/securityalert/2474 http://www.osvdb.org/33521 http://www.securityfocus.com/archive/1/463285/100/0/threaded http://www.securityfocus.com/archive/1/496045/100/0/threaded http://www.securityfocus.com/bid/23102 http://www.vupen.com/english/advisories/2007/1078 https://exchange.xforce.ibmcloud.com/vulnerabilities/33146 •