[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9kid3LLoNClFFjde8EBRkSx9ycLPj43cBWPmxzICdpY":3,"g5a-ex:oracle\u002Fapplication_server_portal@*":95,"g5a-family:oracle\u002Fapplication_server_portal":97},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":72,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":27},"oracle","application_server_portal",6,0,"2008-05-12",[13,17,19,21,23,25],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},"10g",2,false,{"version":18,"cve_count":15,"kev_count":10,"has_kev":16},"3.0.9.8.5",{"version":20,"cve_count":15,"kev_count":10,"has_kev":16},"9.0.2",{"version":22,"cve_count":15,"kev_count":10,"has_kev":16},"9.0.2.3",{"version":24,"cve_count":15,"kev_count":10,"has_kev":16},"9.0.2.3a",{"version":26,"cve_count":15,"kev_count":10,"has_kev":16},"9.0.2.3b","Application Server Portal by Oracle is a technology product with 6 tracked versions and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32,33,34],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},{"version":18,"cve_count":15,"kev_count":10,"has_kev":16},{"version":20,"cve_count":15,"kev_count":10,"has_kev":16},{"version":22,"cve_count":15,"kev_count":10,"has_kev":16},{"version":24,"cve_count":15,"kev_count":10,"has_kev":16},{"version":26,"cve_count":15,"kev_count":10,"has_kev":16},[36,43,50,56,62,67],{"cveId":37,"description":38,"publishedDate":11,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":16,"epssScore":42},"CVE-2008-2138","Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read the contents of \u002Fdav_portal\u002Fportal\u002F by sending a request containing a trailing \"%0A\" (encoded line feed), then using the session ID that is generated from that request.  NOTE: as of 20080512, Oracle has not commented on the accuracy of this report.",5,"v2","Medium",0.15508,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":16,"epssScore":49},"CVE-2006-6697","CRLF injection vulnerability in webapp\u002Fjsp\u002Fcalendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter.","2006-12-22",7.5,"High",0.13102,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":40,"severity":48,"isKev":16,"epssScore":55},"CVE-2004-1707","The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.","2004-07-30",7.2,0.02572,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":40,"severity":41,"isKev":16,"epssScore":61},"CVE-2007-1506","Cross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle Portal 10g allows remote attackers to inject arbitrary web script or HTML via the (1) p_oldurl and (2) p_newurl parameters.","2007-03-19",4.3,0.01902,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":47,"cvssVersion":40,"severity":48,"isKev":16,"epssScore":66},"CVE-2003-1193","Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.","2003-11-03",0.01756,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":16,"epssScore":71},"CVE-2006-6699","Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) calendarDialog.jsp or (2) fred.jsp.  NOTE: the calendar.jsp vector is covered by CVE-2006-6697.","2006-12-23",0.01327,[],{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Application Server Portal by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Application Server Portal by Oracle covering 6 versions with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Application Server Portal vulnerabilities, Application Server Portal security, Application Server Portal CVE, Oracle Application Server Portal, Application Server Portal threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Application Server Portal","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fapplication_server_portal",{"@type":83,"name":84,"url":85},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","6 versions tracked",{"@type":89,"name":90,"description":91,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Application Server Portal Security Vulnerabilities","Security vulnerabilities affecting Application Server Portal by Oracle",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":93,"apiVersion":94},"2026-10-17T14:22:09.738Z","3.0",{"rows":96,"total":10,"capped":16,"failed":10},[],[]]