Vulnerabilities

TI-2026-43295 CVE-2026-60630 · GHSA-cpgq-2w42-46r2

Improper access control in Oracle APEX

LOW 26

Vulnerability in Oracle APEX (component: Installation).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00154 Published 2026-07-21 No fix listed CWE-284

TI-2026-42857 CVE-2026-60156 · GHSA-jq9m-m554-67qg

Information disclosure in Oracle APEX

LOW 30

Vulnerability in Oracle APEX (component: General).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00337 Published 2026-07-21 No fix listed CWE-200

TI-2026-17631 CVE-2026-21931 · GHSA-4f9w-qx2j-3j6q

Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component…

LOW 24

Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0022 Published 2026-01-20 No fix listed

TI-2007-03744 CVE-2007-3860 · GHSA-jqq8-884r-26cj

Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB)…

LOW 37

Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01952 Published 2007-07-18 No fix listed

TI-2007-03738 CVE-2007-3854 · GHSA-47p6-9mfm-8c7j

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5…

LOW 30

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) M…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.02533 Published 2007-07-18 No fix listed

TI-2006-06899 CVE-2006-7158 · GHSA-wr25-mjww-qfr9

Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before…

LOW 22

Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATION_MSG parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2007-03-07 No fix listed

TI-2006-06879 CVE-2006-7138 · GHSA-jq8f-42gf-23cj

SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the…

LOW 30

SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV param…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01322 Published 2007-03-07 No fix listed CWE-89

TI-2006-05404 CVE-2006-5599 · GHSA-39jf-7hvq-h87f

Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB)…

LOW 23

Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01704 Published 2006-10-28 No fix listed

TI-2006-05164 CVE-2006-5352 · GHSA-h288-426v-h727

Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have…

MEDIUM 48

Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2) APEX20, and (3) APEX21.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02872 Published 2006-10-18 No fix listed

TI-2006-05163 CVE-2006-5351 · GHSA-qgww-fx48-47pm

Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML…

MEDIUM 43

Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln# (1) APEX01, (2) APEX02, (3) APEX03, (4) APEX05, (5) APEX…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01963 Published 2006-10-18 No fix listed

Vulnerabilities

Filters