Known Vulnerabilities for Application Express by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Application Express" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96897 json | The Optima Express IDX WordPress plugin before 8.7.6 does not perform any authorisation check on one of its AJAX actions that... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-92395 json | @fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse proxies, and it bac... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-90711 json | proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Expres... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-82417 json | ### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-81907 json | Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF) in the Express "Clear Entries" function (POST... | Not Provided | 2026-09-11 | 2026-09-14 |
| CVE-2026-49473 json | @cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Ex... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-16231 json | hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2023-21983 json | Vulnerability in the Application Express Administration product of Oracle Application Express (component: None). Supported v... | 5.6 - MEDIUM | 2023-07-18 | 2023-07-27 |
| CVE-2023-21975 json | Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: User Account). S... | 9 - CRITICAL | 2023-07-18 | 2023-07-27 |
| CVE-2023-21974 json | Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account)... | 9 - CRITICAL | 2023-07-18 | 2023-07-27 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Application Express | 5.1.4.00.08 | |||
| Application | Oracle | Application Express | 5.1.4 | |||
| Application | Oracle | Application Express | 5.1.3.00.05 | |||
| Application | Oracle | Application Express | 5.1.3 | |||
| Application | Oracle | Application Express | 5.1.2.00.09 | |||
| Application | Oracle | Application Express | 5.1.2 | |||
| Application | Oracle | Application Express | 5.1.1 | |||
| Application | Oracle | Application Express | 5.1.0 | |||
| Application | Oracle | Application Express | 5.0.4 | |||
| Application | Oracle | Application Express | 5.0 | |||
| Application | Oracle | Application Express | 4.2 | |||
| Application | Oracle | Application Express | 4.1 | |||
| Application | Oracle | Application Express | 4.0 | |||
| Application | Oracle | Application Express | 3.2 | |||
| Application | Oracle | Application Express | 3.1 | |||
| Application | Oracle | Application Express | 3.0 | |||
| Application | Oracle | Application Express | 20.2 | |||
| Application | Oracle | Application Express | 20.1 | |||
| Application | Oracle | Application Express | 19.2 | |||
| Application | Oracle | Application Express | 19.1 |