Known Vulnerabilities for Application Express by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Application Express" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-82417 json | ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-49473 json | @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Ex... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-48714 json | i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In ... | Not Provided | 2026-06-15 | 2026-06-16 |
| CVE-2026-16231 json | hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2023-21983 json | Vulnerability in the Application Express Administration product of Oracle Application Express (component: None). Supported v... | 5.6 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-21975 json | Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account). S... | 9 - CRITICAL | 2023-07-18 | 2023-07-27 |
| CVE-2023-21974 json | Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account)... | 9 - CRITICAL | 2023-07-18 | 2023-07-27 |
| CVE-2022-24729 json | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerabil... | 7.5 - HIGH | 2022-03-16 | 2023-11-07 |
| CVE-2022-24728 json | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML pr... | 5.4 - MEDIUM | 2022-03-16 | 2023-11-07 |
| CVE-2021-41182 json | Not Provided | 2021-10-26 | 2026-08-25 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Application Express | 5.1.4.00.08 | |||
| Application | Oracle | Application Express | 5.1.4 | |||
| Application | Oracle | Application Express | 5.1.3.00.05 | |||
| Application | Oracle | Application Express | 5.1.3 | |||
| Application | Oracle | Application Express | 5.1.2.00.09 | |||
| Application | Oracle | Application Express | 5.1.2 | |||
| Application | Oracle | Application Express | 5.1.1 | |||
| Application | Oracle | Application Express | 5.1.0 | |||
| Application | Oracle | Application Express | 5.0.4 | |||
| Application | Oracle | Application Express | 5.0 | |||
| Application | Oracle | Application Express | 4.2 | |||
| Application | Oracle | Application Express | 4.1 | |||
| Application | Oracle | Application Express | 4.0 | |||
| Application | Oracle | Application Express | 3.2 | |||
| Application | Oracle | Application Express | 3.1 | |||
| Application | Oracle | Application Express | 3.0 | |||
| Application | Oracle | Application Express | 20.2 | |||
| Application | Oracle | Application Express | 20.1 | |||
| Application | Oracle | Application Express | 19.2 | |||
| Application | Oracle | Application Express | 19.1 |