Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:apex:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Apex (b4db682b-11ae-5b16-b7c9-5b4fa905cba4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3860 |
vulnerable | 2026-06-08 04:49:55.209911 |
Details available
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '"' characters.
Published: 2007-07-18T19:00:00.000Z
Updated: 2024-08-07T14:28:52.596Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7158 |
vulnerable | 2026-06-08 04:49:30.456456 |
Details available
Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATION_MSG parameter. NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351.
Published: 2007-03-07T20:00:00.000Z
Updated: 2024-08-07T20:57:39.787Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7138 |
vulnerable | 2026-06-08 04:49:30.417532 |
Details available
SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV parameter and calculating a matching MD5 checksum for the P_LOV_CHECKSUM parameter. NOTE: it is likely that this issue is subsumed by CVE-2006-5351, but due to lack of details from Oracle, this cannot be proven.
Published: 2007-03-07T20:00:00.000Z
Updated: 2024-08-07T20:50:06.287Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.