// For flags

CVE-2004-1362

 

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-08-04 CVE Published
  • 2005-01-07 CVE Reserved
  • 2023-12-27 EPSS Updated
  • 2024-08-08 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
*-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2
Search vendor "Oracle" for product "Application Server" and version "9.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.0.0
Search vendor "Oracle" for product "Application Server" and version "9.0.2.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.0.1
Search vendor "Oracle" for product "Application Server" and version "9.0.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.1
Search vendor "Oracle" for product "Application Server" and version "9.0.2.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.2
Search vendor "Oracle" for product "Application Server" and version "9.0.2.2"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.2.3
Search vendor "Oracle" for product "Application Server" and version "9.0.2.3"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.3
Search vendor "Oracle" for product "Application Server" and version "9.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.3.1
Search vendor "Oracle" for product "Application Server" and version "9.0.3.1"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4
Search vendor "Oracle" for product "Application Server" and version "9.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4.0
Search vendor "Oracle" for product "Application Server" and version "9.0.4.0"
-
Affected
Oracle
Search vendor "Oracle"
Application Server
Search vendor "Oracle" for product "Application Server"
9.0.4.1
Search vendor "Oracle" for product "Application Server" and version "9.0.4.1"
-
Affected
Oracle
Search vendor "Oracle"
Collaboration Suite
Search vendor "Oracle" for product "Collaboration Suite"
release_1
Search vendor "Oracle" for product "Collaboration Suite" and version "release_1"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.1
Search vendor "Oracle" for product "E-business Suite" and version "11.5.1"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.2
Search vendor "Oracle" for product "E-business Suite" and version "11.5.2"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.3
Search vendor "Oracle" for product "E-business Suite" and version "11.5.3"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.4
Search vendor "Oracle" for product "E-business Suite" and version "11.5.4"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.5
Search vendor "Oracle" for product "E-business Suite" and version "11.5.5"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.6
Search vendor "Oracle" for product "E-business Suite" and version "11.5.6"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.7
Search vendor "Oracle" for product "E-business Suite" and version "11.5.7"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.8
Search vendor "Oracle" for product "E-business Suite" and version "11.5.8"
-
Affected
Oracle
Search vendor "Oracle"
E-business Suite
Search vendor "Oracle" for product "E-business Suite"
11.5.9
Search vendor "Oracle" for product "E-business Suite" and version "11.5.9"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager
Search vendor "Oracle" for product "Enterprise Manager"
9
Search vendor "Oracle" for product "Enterprise Manager" and version "9"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager
Search vendor "Oracle" for product "Enterprise Manager"
9.0.1
Search vendor "Oracle" for product "Enterprise Manager" and version "9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager Database Control
Search vendor "Oracle" for product "Enterprise Manager Database Control"
10.1.2
Search vendor "Oracle" for product "Enterprise Manager Database Control" and version "10.1.2"
-
Affected
Oracle
Search vendor "Oracle"
Enterprise Manager Grid Control
Search vendor "Oracle" for product "Enterprise Manager Grid Control"
10.1.0.2
Search vendor "Oracle" for product "Enterprise Manager Grid Control" and version "10.1.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
enterprise_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "enterprise_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
enterprise_10.1.0.2
Search vendor "Oracle" for product "Oracle10g" and version "enterprise_10.1.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
personal_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "personal_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
personal_10.1_.0.2
Search vendor "Oracle" for product "Oracle10g" and version "personal_10.1_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
standard_9.0.4_.0
Search vendor "Oracle" for product "Oracle10g" and version "standard_9.0.4_.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle10g
Search vendor "Oracle" for product "Oracle10g"
standard_10.1_.0.2
Search vendor "Oracle" for product "Oracle10g" and version "standard_10.1_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.5_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.5_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.6_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.6_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.0.6_.0.1
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.0.6_.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.0.2
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.5_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.5_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.6_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.6_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.6_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.1.0
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.1.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
enterprise_8.1.7_.4
Search vendor "Oracle" for product "Oracle8i" and version "enterprise_8.1.7_.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.0.6
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.0.6"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.0.6_.3
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.0.6_.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.5
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.6
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.6"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.0.0
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.0.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.1
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle8i
Search vendor "Oracle" for product "Oracle8i"
standard_8.1.7_.4
Search vendor "Oracle" for product "Oracle8i" and version "standard_8.1.7_.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
client_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
client_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "client_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
enterprise_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "enterprise_9.2.0.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "personal_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
personal_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "personal_9.2.0.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_8.1.7
Search vendor "Oracle" for product "Oracle9i" and version "standard_8.1.7"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.3
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.4
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.1.5
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.1.5"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.0.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.1
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.1"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.2
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.2"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.3
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.3"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.4
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.4"
-
Affected
Oracle
Search vendor "Oracle"
Oracle9i
Search vendor "Oracle" for product "Oracle9i"
standard_9.2.0.5
Search vendor "Oracle" for product "Oracle9i" and version "standard_9.2.0.5"
-
Affected