Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*

part: a version: 9.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductHttp Server (674ac569-7e26-5533-9e32-c5eabf3879bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0435 vulnerable 2026-06-08 04:48:53.859459 Details available
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.
Published: 2006-01-26T11:00:00.000Z
Updated: 2024-08-07T16:34:14.824Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2115 vulnerable 2026-06-08 04:48:08.553321 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
Published: 2005-05-27T04:00:00.000Z
Updated: 2024-08-08T01:15:01.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1877 vulnerable 2026-06-08 04:48:07.924007 Details available
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0659 vulnerable 2026-06-08 04:46:21.932747 Details available
The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
Published: 2002-07-31T04:00:00.000Z
Updated: 2024-08-08T02:56:38.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0656 vulnerable 2026-06-08 04:46:21.914324 Details available
Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
Published: 2002-07-31T04:00:00.000Z
Updated: 2024-08-08T02:56:38.489Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0655 vulnerable 2026-06-08 04:46:21.912454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.