Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:forms:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductForms (0cfed3b8-20c7-5f56-98e2-c02c7cd22f61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2372 vulnerable 2026-06-08 04:48:29.155042 Details available
Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.
Published: 2005-07-26T04:00:00.000Z
Updated: 2024-08-07T22:22:49.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1178 vulnerable 2026-06-08 04:48:25.792810 Details available
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
Published: 2005-04-19T04:00:00.000Z
Updated: 2024-08-07T21:44:05.097Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.