CVE Daily – Oracle APEX https://cvedaily.com/pages/tags/oracle-apex.html CVE Daily – Oracle APEX en Wed, 03 Jun 2026 21:27:01 +0000 [Medium] CVE-2026-21931 – Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (com... https://nvd.nist.gov/vuln/detail/CVE-2026-21931 https://nvd.nist.gov/vuln/detail/CVE-2026-21931 Tue, 20 Jan 2026 22:15:55 +0000 Medium CVE-2026-21931

Vulnerability in the Oracle APEX Sample Applications product of Oracle APEX (component: Brookstrut Sample App). Supported versions that are affected are 23.2.0, 23.2.1, 24.1.0, 24.2.0 and 24.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle APEX Sample Applications. Successful attacks require human interaction from a person o…

CVSS: 5.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2006-7138 – SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW... https://nvd.nist.gov/vuln/detail/CVE-2006-7138 https://nvd.nist.gov/vuln/detail/CVE-2006-7138 Wed, 07 Mar 2007 20:19:00 +0000 Medium CVE-2006-7138

SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV parameter and calculating a matching MD5 checksum for the P_LOV_CHECKSUM parameter. NOTE: it is likely that this issue is subsumed by CVE-2006-5351, but due to lack of details from Or…

CVSS: 6.0 · CWE: CWE-89

View on NVD

]]>