Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
BID:50197
Info
Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
| Bugtraq ID: | 50197 |
| Class: | Unknown |
| CVE: |
CVE-2011-3525 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2011 12:00AM |
| Updated: | Oct 18 2011 12:00AM |
| Credit: | Oracle |
| Vulnerable: |
Oracle Application Express 3.2.1 .00.10 Oracle Application Express 4.0 Oracle Application Express 3.2.0.00.27 Oracle Application Express 3.2 |
| Not Vulnerable: | |
Discussion
Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
Oracle Database is prone to a remote vulnerability in Application Express.
The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'APEX developer user' privileges.
This vulnerability affects the following supported versions:
3.2, 4.0
Oracle Database is prone to a remote vulnerability in Application Express.
The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'APEX developer user' privileges.
This vulnerability affects the following supported versions:
3.2, 4.0
Exploit / POC
Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for more information.
Solution:
Vendor updates are available. Please contact the vendor for more information.
References
Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
References:
References: