Browse CVEs

MEDIUM 6.0 CVE-2007-2112 Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, aka DB05. … Database Server Mitigation only Fix from $1,6002007-04-18 HIGH 7.2 CVE-2007-1442 Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DAC… Database Server No fix yet Fix from $1,9502007-03-14 MEDIUM 6.0 CVE-2006-7138 SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote au… Apex after 2.1 Fix from $1,6002007-03-07 MEDIUM 6.0 CVE-2006-7141EPSS 6% Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" pri… Database Server No fix yet Fix from $1,6002007-03-07 MEDIUM 6.0 CVE-2006-7067EPSS 7% Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter session … Database Server No fix yet Fix from $1,6002007-03-02 HIGH 10.0 CVE-2007-0882EPSS 98% Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" seque… Solaris No fix yet Fix from $1,9502007-02-12 MEDIUM 6.8 CVE-2007-0426 BEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic Portal entitlements, does not properly propagate enti… Weblogic Portal Patch available Fix from $1,6002007-01-23 HIGH 8.5 CVE-2007-0272EPSS 7% Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause a denial … Database Server Patch available Fix from $1,9502007-01-17 HIGH 7.8 CVE-2007-0295 Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vectors in P… Enterpriseone Patch available Fix from $1,9502007-01-17 HIGH 7.5 CVE-2007-0279 Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and at… HTTP Server Patch available Fix from $1,9502007-01-17 HIGH 7.5 CVE-2007-0280 Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 9.… HTTP Server Patch available Fix from $1,9502007-01-17 HIGH 7.5 CVE-2007-0292 Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, aka (1) EM… Enterprise Manager Patch available Fix from $1,9502007-01-17 MEDIUM 6.8 CVE-2007-0276 Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to (1) Advanced Security O… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.8 CVE-2007-0277 Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and expdp or … Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.8 CVE-2007-0278 Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1)… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.5 CVE-2007-0268 Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) the Adva… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.5 CVE-2007-0270EPSS 5% Buffer overflow in SYS.DBMS_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (crash) or exe… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.5 CVE-2007-0271 Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component and sys.dbm… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.5 CVE-2007-0274 Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export and sys.dbm… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.4 CVE-2007-0284 Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impact and at… Application Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.4 CVE-2007-0289 Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containers for J2… Application Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.4 CVE-2007-0293 Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1) Oracle … Enterprise Manager Patch available Fix from $1,6002007-01-17 MEDIUM 5.5 CVE-2007-0269 Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Data Capture… Database Server Patch available Fix from $1,6002007-01-17 MEDIUM 5.5 CVE-2007-0290 Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to (1) App… E Business Suite Patch available Fix from $1,6002007-01-17 MEDIUM 5.0 CVE-2007-0281 Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0… HTTP Server Patch available Fix from $1,6002007-01-17 MEDIUM 5.0 CVE-2007-0285 Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Business Suit… Application Server Patch available Fix from $1,6002007-01-17 MEDIUM 5.0 CVE-2007-0222EPSS 11% Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read arbitrar… Application Server Patch available Fix from $1,6002007-01-17 MEDIUM 6.8 CVE-2006-6703 Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc para… Oracle10g Mitigation only Fix from $1,6002006-12-23 MEDIUM 5.0 CVE-2006-6699 Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers an… Application Server Portal Mitigation only Fix from $1,6002006-12-23 HIGH 7.5 CVE-2006-6697EPSS 11% CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrar… Application Server Portal Mitigation only Fix from $1,9502006-12-22