Oracle Application Express 2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:apex:2.2:*:*:*:*:*:*:*
part: a version: 2.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Apex (b4db682b-11ae-5b16-b7c9-5b4fa905cba4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3854 |
vulnerable | 2026-06-08 04:49:55.182105 |
Details available
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.
Published: 2007-07-18T19:00:00.000Z
Updated: 2024-08-07T14:28:52.639Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5599 |
vulnerable | 2026-06-08 04:49:20.858997 |
Details available
Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU.
Published: 2006-10-28T01:00:00.000Z
Updated: 2024-08-07T19:55:53.521Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.