[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEr5umnY92v_Z4Amf6RsAIPRVp1ZYJV7Z4L77K7FQOfA":3,"g5a-ex:oracle\u002Fapplication_express@*":191,"g5a-family:oracle\u002Fapplication_express":196},{"success":4,"data":5},true,{"product":6,"versions":76,"topVulnerabilitiesByEpss":106,"kevVulnerabilities":164,"seoMetadata":170,"meta":189},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":75},"oracle","application_express",29,45,1,"2024-10-15",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"18.2",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"19.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"19.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"20.1",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"20.2",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"21.1.0",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"21.1.0.00.01",{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},"21.1.4",{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},"23.2",{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},"24.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"24.2.4",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"24.2.5",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"3.0",{"version":43,"cve_count":44,"kev_count":16,"has_kev":17},"3.0.1",2,{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"3.1",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"3.2",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"4.0",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"4.1",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"4.2",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"5.0",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.4",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.0",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.1",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.2",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.2.00.09",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.3",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.3.00.05",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.4",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"5.1.4.00.08","Application Express by Oracle is a technology product with 29 tracked versions and 45 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},{"version":33,"cve_count":11,"kev_count":16,"has_kev":17},{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":44,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},[107,115,121,127,131,136,140,147,152,157],{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":114},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"v3.1","Medium",0.8682,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"cvssVersion":112,"severity":113,"isKev":4,"epssScore":120},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":126},"CVE-2021-41184","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.","2021-10-26",6.5,0.40768,{"cveId":128,"description":129,"publishedDate":124,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":130},"CVE-2021-41182","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.",0.39361,{"cveId":132,"description":133,"publishedDate":134,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":135},"CVE-2016-7103","Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.","2017-03-15",0.2258,{"cveId":137,"description":138,"publishedDate":124,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":139},"CVE-2021-41183","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.",0.08533,{"cveId":141,"description":142,"publishedDate":143,"cvssScore":144,"cvssVersion":112,"severity":145,"isKev":17,"epssScore":146},"CVE-2020-7760","This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https:\u002F\u002Fgithub.com\u002Fcodemirror\u002FCodeMirror\u002Fblob\u002Fcdb228ac736369c685865b122b736cd0d397836c\u002Fmode\u002Fjavascript\u002Fjavascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|\u002F*.*?*\u002F)*","2020-10-30",7.5,"High",0.05304,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":151},"CVE-2020-26870","Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.","2020-10-07",0.04881,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":111,"cvssVersion":112,"severity":113,"isKev":17,"epssScore":156},"CVE-2020-9281","A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted \"protected\" comment (with the cke_protected syntax).","2020-03-07",0.04308,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":162,"severity":113,"isKev":17,"epssScore":163},"CVE-2016-3467","Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0.4 allows remote attackers to affect availability via unknown vectors.","2016-07-21",5.8,"v3.0",0.03201,[165],{"cveId":116,"description":117,"publishedDate":118,"cvssScore":119,"severity":113,"isKev":4,"epssScore":120,"cisaVulnName":166,"cisaDateAdded":167,"cisaShortDescription":168,"cisaRequiredAction":169},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":171,"metaDescription":172,"keywords":173,"structuredData":174},"Application Express by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Application Express by Oracle covering 29 versions with 45 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Application Express vulnerabilities, Application Express security, Application Express CVE, Oracle Application Express, Application Express threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Application Express KEV, Application Express exploited vulnerabilities",{"@context":175,"@type":176,"name":177,"description":172,"url":178,"manufacturer":179,"applicationCategory":183,"softwareVersion":184,"mainEntity":185},"https:\u002F\u002Fschema.org","SoftwareApplication","Application Express","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fapplication_express",{"@type":180,"name":181,"url":182},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","29 versions tracked",{"@type":186,"name":187,"description":188,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Application Express Security Vulnerabilities","Security vulnerabilities affecting Application Express by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":190,"apiVersion":41},"2026-10-17T19:20:27.986Z",{"rows":192,"total":11,"capped":17,"failed":11},[193],{"cveId":116,"name":166,"severity":113,"cvss":119,"added":167,"epss":120,"published":118,"ranges":194,"hits":195,"checked":17,"covers":17},[],[],[197,199,201],{"product":198,"cves":11},"application_express_listener",{"product":200,"cves":11},"application_express_opportunity_tracker",{"product":202,"cves":11},"application_express_survey_builder"]