CVE

Id
27217  
CVE No.
CVE-2007-3860  
Status
Candidate  
Description
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for """ characters.  
Phase
Assigned (20070718)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
279243 27217 CVE-2007-3860 BUGTRAQ:20070718 Oracle Security: SQL Injection in APEX CHECK_DB_PASSWORD  View
279244 27217 CVE-2007-3860 URL:http://www.securityfocus.com/archive/1/archive/1/474002/100/0/threaded  View
279245 27217 CVE-2007-3860 MISC:http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf  View
279246 27217 CVE-2007-3860 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html  View
279247 27217 CVE-2007-3860 MISC:http://www.red-database-security.com/advisory/oracle_apex_sql_injection_check_db_password.html  View
279248 27217 CVE-2007-3860 MISC:http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html  View
279249 27217 CVE-2007-3860 HP:HPSBMA02133  View
279250 27217 CVE-2007-3860 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143  View
279251 27217 CVE-2007-3860 HP:SSRT061201  View
279252 27217 CVE-2007-3860 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143  View
279253 27217 CVE-2007-3860 CERT:TA07-200A  View
279254 27217 CVE-2007-3860 URL:http://www.us-cert.gov/cas/techalerts/TA07-200A.html  View
279255 27217 CVE-2007-3860 VUPEN:ADV-2007-2562  View
279256 27217 CVE-2007-3860 URL:http://www.vupen.com/english/advisories/2007/2562  View
279257 27217 CVE-2007-3860 VUPEN:ADV-2007-2635  View
279258 27217 CVE-2007-3860 URL:http://www.vupen.com/english/advisories/2007/2635  View
279259 27217 CVE-2007-3860 SECTRACK:1018415  View
279260 27217 CVE-2007-3860 URL:http://www.securitytracker.com/id?1018415  View
279261 27217 CVE-2007-3860 SECUNIA:26114  View
279262 27217 CVE-2007-3860 URL:http://secunia.com/advisories/26114  View
279263 27217 CVE-2007-3860 SECUNIA:26166  View
279264 27217 CVE-2007-3860 URL:http://secunia.com/advisories/26166  View
279265 27217 CVE-2007-3860 SREASON:2901  View
279266 27217 CVE-2007-3860 URL:http://securityreason.com/securityalert/2901  View
279267 27217 CVE-2007-3860 XF:oracle-apex-sql-injection(35499)  View
279268 27217 CVE-2007-3860 URL:http://xforce.iss.net/xforce/xfdb/35499  View
279269 27217 CVE-2007-3860 XF:oracle-cpu-july2007(35490)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51872 JVNDB-2007-000535 Oracle の複数の製品の Oracle Single Sign On コンポーネントにおける脆弱性 Oracle Application Server および Collaboration Suiteの Oracle Single Sign On コンポーネントに関連する脆弱性が存在します。(AS01) CVE-2007-3862 27217 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000535.html  View