Oracle HTTP Server 9.2.0

CPE Details

Oracle HTTP Server 9.2.0
9.2.0
2007-08-23
19h16 +00:00
2009-06-03
17h42 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

http_server

Version

9.2.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2006-0435 2006-01-26 10h00 +00:00 Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.
7.5
CVE-2004-2115 2005-05-27 02h00 +00:00 Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
6.8
CVE-2004-1877 2005-05-10 02h00 +00:00 The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
2.6
CVE-2002-0655 2002-07-31 02h00 +00:00 OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
7.5
CVE-2002-0656 2002-07-31 02h00 +00:00 Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
7.5
CVE-2002-0659 2002-07-31 02h00 +00:00 The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
5