[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZXITUZP14baj8kP4E1ieg0j5eZNM_h4H6PL_bo9GQpQ":3,"g5a-ex:oracle\u002Fapplication_server@*":355,"g5a-family:oracle\u002Fapplication_server":357},{"success":4,"data":5},true,{"product":6,"versions":195,"topVulnerabilitiesByEpss":274,"kevVulnerabilities":332,"seoMetadata":333,"meta":352},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":194},"oracle","application_server",78,199,0,"2020-04-21",[14,18,21,23,25,28,31,33,36,39,41,44,47,49,52,54,57,60,63,66,68,70,72,75,77,79,81,83,85,87,89,91,94,96,98,100,102,104,106,108,111,113,115,117,119,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,165,168,171,174,176,178,180,183,185,188,190,192],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"0.9.8",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"1.0",4,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.0",{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.1",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"10.1.0.2",7,{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"10.1.0.3",6,{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},"10.1.0.3.1",{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"10.1.0.4",3,{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.2",5,{"version":40,"cve_count":35,"kev_count":11,"has_kev":17},"10.1.2.0",{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},"10.1.2.0.0",15,{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},"10.1.2.0.1",13,{"version":48,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.2_.0.1",{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"10.1.2.0.2",55,{"version":53,"cve_count":35,"kev_count":11,"has_kev":17},"10.1.2.1",{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},"10.1.2.1.0",20,{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},"10.1.2.2",26,{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},"10.1.2.2.0",10,{"version":64,"cve_count":65,"kev_count":11,"has_kev":17},"10.1.2.3",11,{"version":67,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.2.3.0",{"version":69,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.3",{"version":71,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.3.0",{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},"10.1.3.0.0",12,{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},"10.1.3.1",{"version":78,"cve_count":62,"kev_count":11,"has_kev":17},"10.1.3.1.0",{"version":80,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.3.2.0",{"version":82,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.3.2.1",{"version":84,"cve_count":27,"kev_count":11,"has_kev":17},"10.1.3.3",{"version":86,"cve_count":62,"kev_count":11,"has_kev":17},"10.1.3.3.0",{"version":88,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.3.3.3",{"version":90,"cve_count":30,"kev_count":11,"has_kev":17},"10.1.3.4",{"version":92,"cve_count":93,"kev_count":11,"has_kev":17},"10.1.3.4.1",1,{"version":95,"cve_count":35,"kev_count":11,"has_kev":17},"10.1.4.0",{"version":97,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.4.0.1",{"version":99,"cve_count":38,"kev_count":11,"has_kev":17},"10.1.4.1",{"version":101,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.4.1.0",{"version":103,"cve_count":16,"kev_count":11,"has_kev":17},"10.1.4.2",{"version":105,"cve_count":20,"kev_count":11,"has_kev":17},"10.1.4.2.0",{"version":107,"cve_count":93,"kev_count":11,"has_kev":17},"10.1.4.3im",{"version":109,"cve_count":110,"kev_count":11,"has_kev":17},"1.0.2",29,{"version":112,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.2.0",{"version":114,"cve_count":93,"kev_count":11,"has_kev":17},"10.2.0.0",{"version":116,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.2.1",{"version":118,"cve_count":46,"kev_count":11,"has_kev":17},"1.0.2.1s",{"version":120,"cve_count":121,"kev_count":11,"has_kev":17},"1.0.2.2",34,{"version":123,"cve_count":38,"kev_count":11,"has_kev":17},"1.0.2.2.2",{"version":125,"cve_count":93,"kev_count":11,"has_kev":17},"1.1.8.26",{"version":127,"cve_count":16,"kev_count":11,"has_kev":17},"11i",{"version":129,"cve_count":93,"kev_count":11,"has_kev":17},"12.1.3",{"version":131,"cve_count":93,"kev_count":11,"has_kev":17},"3.0.7",{"version":133,"cve_count":16,"kev_count":11,"has_kev":17},"4.0",{"version":135,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.8",{"version":137,"cve_count":35,"kev_count":11,"has_kev":17},"4.0.8.2",{"version":139,"cve_count":20,"kev_count":11,"has_kev":17},"5.6.2",{"version":141,"cve_count":16,"kev_count":11,"has_kev":17},"6.0.8.26_ps17",{"version":143,"cve_count":93,"kev_count":11,"has_kev":17},"7.0.4.3",{"version":145,"cve_count":16,"kev_count":11,"has_kev":17},"7.0.4.4",{"version":147,"cve_count":93,"kev_count":11,"has_kev":17},"8.1.7",{"version":149,"cve_count":93,"kev_count":11,"has_kev":17},"8.1.9",{"version":151,"cve_count":35,"kev_count":11,"has_kev":17},"8.2.2",{"version":153,"cve_count":35,"kev_count":11,"has_kev":17},"8.3.0",{"version":155,"cve_count":30,"kev_count":11,"has_kev":17},"9.0",{"version":157,"cve_count":59,"kev_count":11,"has_kev":17},"9.0.2",{"version":159,"cve_count":56,"kev_count":11,"has_kev":17},"9.0.2.0.0",{"version":161,"cve_count":56,"kev_count":11,"has_kev":17},"9.0.2.0.1",{"version":163,"cve_count":164,"kev_count":11,"has_kev":17},"9.0.2.1",19,{"version":166,"cve_count":167,"kev_count":11,"has_kev":17},"9.0.2.2",16,{"version":169,"cve_count":170,"kev_count":11,"has_kev":17},"9.0.2.3",30,{"version":172,"cve_count":173,"kev_count":11,"has_kev":17},"9.0.3",17,{"version":175,"cve_count":110,"kev_count":11,"has_kev":17},"9.0.3.1",{"version":177,"cve_count":74,"kev_count":11,"has_kev":17},"9.0.4",{"version":179,"cve_count":74,"kev_count":11,"has_kev":17},"9.0.4.0",{"version":181,"cve_count":182,"kev_count":11,"has_kev":17},"9.0.4.1",24,{"version":184,"cve_count":59,"kev_count":11,"has_kev":17},"9.0.4.2",{"version":186,"cve_count":187,"kev_count":11,"has_kev":17},"9.0.4.3",49,{"version":189,"cve_count":35,"kev_count":11,"has_kev":17},"9.2.0.6",{"version":191,"cve_count":16,"kev_count":11,"has_kev":17},"9.2.0.7",{"version":193,"cve_count":93,"kev_count":11,"has_kev":17},"release_1.0.2.0.1","Application Server by Oracle is a technology product with 78 tracked versions and 199 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":35,"kev_count":11,"has_kev":17},{"version":42,"cve_count":43,"kev_count":11,"has_kev":17},{"version":45,"cve_count":46,"kev_count":11,"has_kev":17},{"version":48,"cve_count":16,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":35,"kev_count":11,"has_kev":17},{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},{"version":64,"cve_count":65,"kev_count":11,"has_kev":17},{"version":67,"cve_count":38,"kev_count":11,"has_kev":17},{"version":69,"cve_count":16,"kev_count":11,"has_kev":17},{"version":71,"cve_count":38,"kev_count":11,"has_kev":17},{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},{"version":76,"cve_count":20,"kev_count":11,"has_kev":17},{"version":78,"cve_count":62,"kev_count":11,"has_kev":17},{"version":80,"cve_count":38,"kev_count":11,"has_kev":17},{"version":82,"cve_count":38,"kev_count":11,"has_kev":17},{"version":84,"cve_count":27,"kev_count":11,"has_kev":17},{"version":86,"cve_count":62,"kev_count":11,"has_kev":17},{"version":88,"cve_count":38,"kev_count":11,"has_kev":17},{"version":90,"cve_count":30,"kev_count":11,"has_kev":17},{"version":92,"cve_count":93,"kev_count":11,"has_kev":17},{"version":95,"cve_count":35,"kev_count":11,"has_kev":17},{"version":97,"cve_count":16,"kev_count":11,"has_kev":17},{"version":99,"cve_count":38,"kev_count":11,"has_kev":17},{"version":101,"cve_count":16,"kev_count":11,"has_kev":17},{"version":103,"cve_count":16,"kev_count":11,"has_kev":17},{"version":105,"cve_count":20,"kev_count":11,"has_kev":17},{"version":107,"cve_count":93,"kev_count":11,"has_kev":17},{"version":109,"cve_count":110,"kev_count":11,"has_kev":17},{"version":112,"cve_count":16,"kev_count":11,"has_kev":17},{"version":114,"cve_count":93,"kev_count":11,"has_kev":17},{"version":116,"cve_count":16,"kev_count":11,"has_kev":17},{"version":118,"cve_count":46,"kev_count":11,"has_kev":17},{"version":120,"cve_count":121,"kev_count":11,"has_kev":17},{"version":123,"cve_count":38,"kev_count":11,"has_kev":17},{"version":125,"cve_count":93,"kev_count":11,"has_kev":17},{"version":127,"cve_count":16,"kev_count":11,"has_kev":17},{"version":129,"cve_count":93,"kev_count":11,"has_kev":17},{"version":131,"cve_count":93,"kev_count":11,"has_kev":17},{"version":133,"cve_count":16,"kev_count":11,"has_kev":17},{"version":135,"cve_count":16,"kev_count":11,"has_kev":17},{"version":137,"cve_count":35,"kev_count":11,"has_kev":17},{"version":139,"cve_count":20,"kev_count":11,"has_kev":17},{"version":141,"cve_count":16,"kev_count":11,"has_kev":17},{"version":143,"cve_count":93,"kev_count":11,"has_kev":17},{"version":145,"cve_count":16,"kev_count":11,"has_kev":17},{"version":147,"cve_count":93,"kev_count":11,"has_kev":17},{"version":149,"cve_count":93,"kev_count":11,"has_kev":17},{"version":151,"cve_count":35,"kev_count":11,"has_kev":17},{"version":153,"cve_count":35,"kev_count":11,"has_kev":17},{"version":155,"cve_count":30,"kev_count":11,"has_kev":17},{"version":157,"cve_count":59,"kev_count":11,"has_kev":17},{"version":159,"cve_count":56,"kev_count":11,"has_kev":17},{"version":161,"cve_count":56,"kev_count":11,"has_kev":17},{"version":163,"cve_count":164,"kev_count":11,"has_kev":17},{"version":166,"cve_count":167,"kev_count":11,"has_kev":17},{"version":169,"cve_count":170,"kev_count":11,"has_kev":17},{"version":172,"cve_count":173,"kev_count":11,"has_kev":17},{"version":175,"cve_count":110,"kev_count":11,"has_kev":17},{"version":177,"cve_count":74,"kev_count":11,"has_kev":17},{"version":179,"cve_count":74,"kev_count":11,"has_kev":17},{"version":181,"cve_count":182,"kev_count":11,"has_kev":17},{"version":184,"cve_count":59,"kev_count":11,"has_kev":17},{"version":186,"cve_count":187,"kev_count":11,"has_kev":17},{"version":189,"cve_count":35,"kev_count":11,"has_kev":17},{"version":191,"cve_count":16,"kev_count":11,"has_kev":17},{"version":193,"cve_count":93,"kev_count":11,"has_kev":17},[275,283,290,297,302,307,311,317,321,326],{"cveId":276,"description":277,"publishedDate":278,"cvssScore":279,"cvssVersion":280,"severity":281,"isKev":17,"epssScore":282},"CVE-2002-0840","Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is \"Off\" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.","2002-10-11",6.8,"v2","Medium",0.95087,{"cveId":284,"description":285,"publishedDate":286,"cvssScore":287,"cvssVersion":280,"severity":288,"isKev":17,"epssScore":289},"CVE-2002-0656","Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.","2002-08-12",7.5,"High",0.8982,{"cveId":291,"description":292,"publishedDate":293,"cvssScore":294,"cvssVersion":280,"severity":295,"isKev":17,"epssScore":296},"CVE-2002-0568","Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.","2002-07-03",2.1,"Low",0.75176,{"cveId":298,"description":299,"publishedDate":300,"cvssScore":38,"cvssVersion":280,"severity":281,"isKev":17,"epssScore":301},"CVE-2001-1217","Directory traversal vulnerability in PL\u002FSQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.","2001-12-21",0.54383,{"cveId":303,"description":304,"publishedDate":12,"cvssScore":287,"cvssVersion":305,"severity":288,"isKev":17,"epssScore":306},"CVE-2020-1967","Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).","v3.1",0.53336,{"cveId":308,"description":309,"publishedDate":293,"cvssScore":38,"cvssVersion":280,"severity":281,"isKev":17,"epssScore":310},"CVE-2002-0563","The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms\u002FDMSDump, (3) servlet\u002FDMSDump, (4) servlet\u002FSpy, (5) soap\u002Fservlet\u002FSpy, and (6) dms\u002FAggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.",0.51129,{"cveId":312,"description":313,"publishedDate":314,"cvssScore":315,"cvssVersion":280,"severity":281,"isKev":17,"epssScore":316},"CVE-2005-1496","The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user.","2005-05-11",4.6,0.38312,{"cveId":318,"description":319,"publishedDate":286,"cvssScore":38,"cvssVersion":280,"severity":281,"isKev":17,"epssScore":320},"CVE-2002-0659","The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.",0.36198,{"cveId":322,"description":323,"publishedDate":324,"cvssScore":287,"cvssVersion":280,"severity":288,"isKev":17,"epssScore":325},"CVE-2005-1383","The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.","2005-05-03",0.30612,{"cveId":327,"description":328,"publishedDate":329,"cvssScore":62,"cvssVersion":280,"severity":330,"isKev":17,"epssScore":331},"CVE-2006-0287","Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.","2006-01-18","Critical",0.29006,[],{"title":334,"metaDescription":335,"keywords":336,"structuredData":337},"Application Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Application Server by Oracle covering 78 versions with 199 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Application Server vulnerabilities, Application Server security, Application Server CVE, Oracle Application Server, Application Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":338,"@type":339,"name":340,"description":335,"url":341,"manufacturer":342,"applicationCategory":346,"softwareVersion":347,"mainEntity":348},"https:\u002F\u002Fschema.org","SoftwareApplication","Application Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fapplication_server",{"@type":343,"name":344,"url":345},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","78 versions tracked",{"@type":349,"name":350,"description":351,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Application Server Security Vulnerabilities","Security vulnerabilities affecting Application Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":353,"apiVersion":354},"2026-10-17T14:22:06.559Z","3.0",{"rows":356,"total":11,"capped":17,"failed":11},[],[358,360,362,364],{"product":359,"cves":43},"application_server_web_cache",{"product":361,"cves":30},"application_server_portal",{"product":363,"cves":16},"application_server_9i",{"product":365,"cves":16},"application_server_discussion_forum_portlet"]