Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:apex:2.2.0.00.32:*:*:*:*:*:*:*

part: a version: 2.2.0.00.32 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductApex (b4db682b-11ae-5b16-b7c9-5b4fa905cba4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3860 vulnerable 2026-06-08 04:49:55.210473 Details available
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '"' characters.
Published: 2007-07-18T19:00:00.000Z
Updated: 2024-08-07T14:28:52.596Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.