CVE-2007-3860

N/A Unknown
Published: July 18, 2007 Modified: April 23, 2026
View on NVD

Description

Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an unknown impact via unknown attack vectors, aka APEX01. NOTE: a reliable researcher states that this is SQL injection in the wwv_flow_security.check_db_password function due to insufficient checks for '"' characters.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143
Source: cve@mitre.org
http://secunia.com/advisories/26114
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26166
Source: cve@mitre.org
http://securityreason.com/securityalert/2901
Source: cve@mitre.org
http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
Source: cve@mitre.org
http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
Source: cve@mitre.org
http://www.red-database-security.com/advisory/oracle_apex_sql_injection_check_db_password.html
Source: cve@mitre.org
http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/474002/100/0/threaded
Source: cve@mitre.org
http://www.securitytracker.com/id?1018415
Source: cve@mitre.org
http://www.us-cert.gov/cas/techalerts/TA07-200A.html
Source: cve@mitre.org
US Government Resource
http://www.vupen.com/english/advisories/2007/2562
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2007/2635
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/35490
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/35499
Source: cve@mitre.org
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/26114
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26166
Source: af854a3a-2127-422b-91ae-364da2661108
http://securityreason.com/securityalert/2901
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdf
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.red-database-security.com/advisory/oracle_apex_sql_injection_check_db_password.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/474002/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1018415
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.us-cert.gov/cas/techalerts/TA07-200A.html
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
http://www.vupen.com/english/advisories/2007/2562
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/2635
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/35490
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/35499
Source: af854a3a-2127-422b-91ae-364da2661108

30 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.7%
82th percentile
Exploitation Status
Not in CISA KEV

Affected Vendors

oracle