Oracle10g

oracle10g

Vendor: Oracle • 23 CVEs

CVEs (23)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-1365 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
CVE-2004-1364 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 8.5 HIGH· v2 Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
CVE-2004-1362 1Oracle 9Application Server Collaboration SuiteE Business Suite+6 more Apr 16, 2026 Aug 4, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access re...Show more The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.Show less