11 results (0.010 seconds)

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-2655 – Oracle Application Express Cross Site Scripting

https://notcve.org/view.php?id=CVE-2015-2655

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.3.00.08 allows remote authenticated users to affect confidentiality and integrity via unknown vectors. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server en versiones anteriores a 4.2.3.00.08, permite a usuarios remotos autenticados afectar la confidencialidad e integridad a través de vectores desconocidos. The gReport Controls Sort Widget in Oracle Application Express is prone to permanent cross site scripting. The setting "display as" of the column attributes is ignored for the filter list. Versions prior to 4.2.3.00.08 are affected. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securityfocus.com/bid/75864 http://www.securitytracker.com/id/1032903 •

CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-2585

https://notcve.org/view.php?id=CVE-2015-2585

Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server anterior a la versión 5.0, permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032903 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-2586

https://notcve.org/view.php?id=CVE-2015-2586

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.1 allows remote attackers to affect availability via unknown vectors. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server anterior a la versión 4.2.1, permite a atacantes remotos afectar la disponibilidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.securitytracker.com/id/1032903 •

CVSS: 6.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2014-6483

https://notcve.org/view.php?id=CVE-2014-6483

Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server anterior a 4.2.6 permite a usuarios remotos autenticados afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. • http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.securityfocus.com/bid/70480 •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2011-3525

https://notcve.org/view.php?id=CVE-2011-3525

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user. Vulnerabilidad no especificada en el componente Application Express en Oracle Database Server v3.2 y v4.0 permite a usuarios autenticados de forma remota afectar a la confidencialidad, integridad y disponibilidad, relacionado con un usuario desarrollador APEX. • http://osvdb.org/76516 http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html http://www.securityfocus.com/bid/50197 https://exchange.xforce.ibmcloud.com/vulnerabilities/70799 •