NVD

Id
56004  
Name
CVE-2007-3860  
Description
Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for """ characters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-18  
Modified Date
2012-10-22  
Seq
2007-3860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285060 56004 CVE-2007-3860 SSRT061201  View
285061 56004 CVE-2007-3860 2901  View
285062 56004 CVE-2007-3860 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf  View
285063 56004 CVE-2007-3860 http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html  View
285064 56004 CVE-2007-3860 http://www.red-database-security.com/advisory/oracle_apex_sql_injection_check_db_password.html  View
285065 56004 CVE-2007-3860 http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html  View
285066 56004 CVE-2007-3860 20070718 Oracle Security: SQL Injection in APEX CHECK_DB_PASSWORD  View
285067 56004 CVE-2007-3860 1018415  View
285068 56004 CVE-2007-3860 TA07-200A  View
285069 56004 CVE-2007-3860 ADV-2007-2562  View
285070 56004 CVE-2007-3860 ADV-2007-2635  View
285071 56004 CVE-2007-3860 oracle-cpu-july2007(35490)  View
285072 56004 CVE-2007-3860 oracle-apex-sql-injection(35499)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55445 JVNDB-2007-004137 Oracle Application Express における脆弱性 Oracle Application Express (以前は Oracle HTML DB) には、不特定の影響を受ける脆弱性が存在します。 CVE-2007-3860 27215 CVE-2007-3860 56004 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004137.html 2007-07-17 2012-09-25 View