Application Server Portal
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:application_server_portal:10g:*:*:*:*:*:*:*
part: a version: 10g update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Application Server Portal (4d9981c1-65af-527a-bf93-0c76b6de74ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-2138 |
vulnerable | 2026-06-08 04:50:23.049121 |
Details available
Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of /dav_portal/portal/ by sending a request containing a trailing "%0A" (encoded line feed), then using the session ID that is generated from that request. NOTE: as of 20080512, Oracle has not commented on the accuracy of this report.
Published: 2008-05-12T16:00:00.000Z
Updated: 2024-08-07T08:49:58.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6697 |
vulnerable | 2026-06-08 04:49:29.512427 |
Details available
CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.
Published: 2006-12-22T02:00:00.000Z
Updated: 2024-08-07T20:33:59.974Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.