Sploitus

13 exploited vulnerabilities in Oracle Application Server

Vulnerabilities with publicly known exploits

Vendors
Oracle
With known exploits
13
Affected Oracle Application Server versions
= 9.0.4.1, 10.1.2.0.2, 1.1.8.26, 10.1.0.2, 10.1.0.3, 10.1.0.3.1, 10.1.2, 4.0.8.2, 10.1.2.2, 10.1.3.3, 11i, 9.0.4.3
Affected Oracle E-business Suite versions
= 11.5.10, 12.0.3
Affected Oracle Collaboration Suite versions
= 9.0.4.2
Affected Oracle Database Server versions
= 10.1.0.4.2, 10.1.0.5, 10.2.0.3
Affected Oracle E-business Suite 11i versions
= 11.5.10.2
Affected Oracle Database 10g versions
= 10.1.2.3, 10.1.4.2
Affected Oracle Database 9i versions
= 9.0.4.3
Affected Oracle Application Server Discussion Forum Portlet versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2006-0288
CVSS 10.0 HIGH 2006-01-18
CVE-2006-0283
CVSS 10.0 HIGH 2006-01-18
CVE-2008-7233
CVSS 9.3 HIGH 2009-09-14
CVE-2005-1383 1 exploit
CVSS 7.5 HIGH 2005-05-02FIX AVAILABLE
Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass
CVE-2001-0419 1 exploit
CVSS 7.5 HIGH 2001-05-24FIX AVAILABLE
Oracle Application Server 4.0.8.2 - ndwfn4.so Buffer Overflow
CVE-2008-7234
CVSS 6.8 MEDIUM 2009-09-14
CVE-2007-5508 1 exploit
CVSS 6.5 MEDIUM 2007-10-17FIX AVAILABLE
Oracle 10g - 'CTX_DOC.MARKUP' SQL Injection
CVE-2008-2595 6 exploits
CVSS 5.0 MEDIUM 2008-07-15
Oracle Internet Directory 10.1.4 - Remote Preauth DoS ExploitOracle Internet Directory 10.1.4 Remote Preauth DoS Exploit
CVE-2005-4550 1 exploit
CVSS 5.0 MEDIUM 2005-12-28
oracle Application server discussion forum portlet - Multiple Vulnerabilities
CVE-2008-7235
CVSS 4.3 MEDIUM 2009-09-14
CVE-2007-3553 1 exploit
CVSS 4.3 MEDIUM 2007-07-03
Oracle Rapid Install Web Server - Secondary Login Page Cross-Site Scripting
CVE-2005-4549
CVSS 4.3 MEDIUM 2005-12-28
CVE-2008-7237
CVSS 4.0 MEDIUM 2009-09-14