Oracle Oracle Forms 4.5

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:forms:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductForms (0cfed3b8-20c7-5f56-98e2-c02c7cd22f61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-2372 vulnerable 2026-06-08 04:48:29.155067 Details available
Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.
Published: 2005-07-26T04:00:00.000Z
Updated: 2024-08-07T22:22:49.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2294 vulnerable 2026-06-08 04:48:28.831969 Details available
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
Published: 2005-07-17T04:00:00.000Z
Updated: 2024-08-07T22:22:48.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1178 vulnerable 2026-06-08 04:48:25.793398 Details available
SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.
Published: 2005-04-19T04:00:00.000Z
Updated: 2024-08-07T21:44:05.097Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.