CVE-2011-3525

Published: Oct 18, 2011Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.

Affected (2)

Products: Oracle: Database Server

Oracle

1 product

Database Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Oracle Database Server	Version 3.2
Oracle Database Server	Version 4.0

References (8)

http://osvdb.org/76516

Source: secalert_us@oracle.com

http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Source: secalert_us@oracle.com

PatchVendor Advisory

http://www.securityfocus.com/bid/50197

Source: secalert_us@oracle.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/70799

Source: secalert_us@oracle.com

http://osvdb.org/76516

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/50197

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/70799

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.