Vulnerability in Oracle Application_server
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for cert…
EPSS: 0.090 (94.7th percentile) — read the EPSS interpretation.
Affected products
- Oracle Application_server — versions 9.0.2, 9.0.2.0.0, 9.0.2.0.1
- Oracle Collaboration_suite — versions release_1
- Oracle E-business_suite — versions 11.5.1, 11.5.2, 11.5.3
- Oracle Enterprise_manager — versions 9, 9.0.1
- Oracle Enterprise_manager_database_control — versions 10.1.2
- Oracle Enterprise_manager_grid_control — versions 10.1.0.2
- Oracle Oracle10g — versions enterprise_9.0.4_.0, enterprise_10.1.0.2, personal_9.0.4_.0
- Oracle Oracle8i — versions enterprise_8.0.5_.0.0, enterprise_8.0.6_.0.0, enterprise_8.0.6_.0.1
- Oracle Oracle9i — versions client_9.2.0.1, client_9.2.0.2, enterprise_8.1.7
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (US Government Resource, Patch, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)