Oracle : Security Vulnerabilities, CVEs, Published In November 2003
Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.
Max CVSS
7.5
EPSS Score
0.24%
Published
2003-11-03
Updated
2017-07-11
Buffer overflow in the (1) oracle and (2) oracleO programs in Oracle 9i Database 9.0.x and 9.2.x before 9.2.0.4 allows local users to execute arbitrary code via a long command line argument.
Max CVSS
4.6
EPSS Score
0.08%
Published
2003-11-17
Updated
2017-07-11
The grid option in PeopleSoft 8.42 stores temporary .xls files in guessable directories under the web document root, which allows remote attackers to steal search results by directly accessing the files via a URL request.
Max CVSS
5.0
EPSS Score
0.15%
Published
2003-11-17
Updated
2019-08-19
3 vulnerabilities found