CVE-2005-1383: oracle application_server

EPSS trend

Probability

30.61%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 30.61% on 19-09-2026

19-09-202619-10-2026

EPSS score

30.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (red-database-security.com)
Maturity: unknown
referenceUnverified
Exploit Reference (osvdb.org)
Maturity: unknown

Show all 4 exploits

exploit-databaseremotemultipleVerified
Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass
Maturity: weaponized

References

6 links

www.securityfocus.com/bid/13418VDB EntryX Refsource BIDExploitPatch
marc.info?l=bugtraq&m=111472266123952&w=2Mailing ListX Refsource BUGTRAQ
www.red-database-security.com/advisory/oracle_webcache_bypass.htmlX Refsource MISCExploitPatch
www.osvdb.org/15908VDB EntryX Refsource OSVDBExploitPatch
secunia.com/advisories/15143Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/20311VDB EntryX Refsource XF

Related vulnerabilities

CVE-2018-0735alpinenodejs+324.72%7y ago29-10-2018 13:00The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).CVE-2018-5407alpineopenssl+333.42%7y ago15-11-2018 21:00Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.CVE-2007-3854oracleapex+82.53%19y ago18-07-2007 19:00Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via (1) SYS.DBMS_PRVTAQIS in the Advanced Queuing component (DB02) and (2) MDSYS.MD in the Spatial component (DB12). NOTE: Oracle has not disputed reliable researcher claims that DB02 is for SQL injection and DB12 is for a buffer overflow.CVE-2020-1967alpineopenssl+4853.34%6y ago21-04-2020 13:45Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).CVE-2001-0326oracleapplication_server+15.18%25y ago07-05-2001 04:00Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.CVE-2001-0419oracleapplication_server24.45%25y ago24-05-2001 04:00Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.

All vulnerabilities inapplication_server

CVE-2005-1383: oracle application_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References