Detections
Analytics
Oracle Application Express (Apex) Unspecified Issues (pre 2.2.1)
critical Nessus Plugin ID 64714
Language:
Synopsis
The remote host is running a vulnerable version of Oracle Apex.Description
There are unspecified vulnerabilities in versions prior to version 2.2.1 of the Oracle Application Express component of the Oracle Database. The updated version of Apex contains '35 new security fixes for Oracle Application Express, 25 of which may be remotely exploitable without authentication'.Solution
Upgrade Application Express to at least version 2.2.1.See Also
http://www.oracle.com/technetwork/developer-tools/apex/index.html
https://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
Plugin Details
Severity: Critical
ID: 64714
File Name: oracle_apex_pre221.nasl
Version: 1.8
Type: remote
Family: Web Servers
Published: 2/20/2013
Updated: 6/12/2020
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:oracle:application_express
Required KB Items: Oracle/Apex
Exploit Ease: No known exploits are available
Patch Publication Date: 10/18/2006
Vulnerability Publication Date: 10/18/2006
Exploitable With
ExploitHub (EH-11-486)
Reference Information
CVE: CVE-2006-5351, CVE-2006-5352
BID: 20588