Known vulnerabilities in Oracle Application Express

Vendor: Oracle
Software: Oracle Application Express
Software CPE: cpe:2.3:a:oracle:apex:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 33
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Application Express Oracle Application Express is affected by 33 known vulnerabilities: 1 high, 26 medium, 6 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112913 - Improper input validation
CVE-2025-50067		 CWE-20 High
No
No
 - 15.07.2025 SB2025071546
#VU103147 - Improper input validation
CVE-2025-21557		 CWE-20 Medium
No
No
 - 21.01.2025 SB2025012174
#VU98603 - Improper input validation
CVE-2024-21261		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015115
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 - 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 - 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU88955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29203		 CWE-79 Low
No
No
 - 24.04.2024 SB2024042404
SB2024042405
SB2024070923
and 2 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729		 CWE-185 Low
No
No
 22.1.1 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU59698 - Incorrect Regular Expression
CVE-2021-32723		 CWE-185 Medium
No
No
 21.1.4 18.01.2022 SB2021062817
SB2022011822
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 22.1.1 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165		 CWE-79 Medium
No
No
 22.1.0 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU55859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37695		 CWE-79 Low
No
No
 21.1.4 16.08.2021 SB2021081608
SB2022011822
SB2022020113
and 16 more
#VU55048 - Improper input validation
CVE-2021-2460		 CWE-20 Medium
No
No
 21.1.0.00.04 20.07.2021 SB2021072052
#VU52500 - Improper input validation
CVE-2020-27193		 CWE-20 Medium
No
No
 21.1.0.00.01 23.04.2021 SB2021042301
SB2021042522
SB2021042615
and 4 more
#VU52384 - Resource exhaustion
CVE-2020-7760		 CWE-400 Medium
No
No
 20.2 21.04.2021 SB2020103047
SB2021042101
SB2021042106
and 12 more
#VU50054 - Improper input validation
CVE-2021-26272		 CWE-20 Low
No
No
 21.1.0 26.01.2021 SB2021012719
SB2021072116
SB2021072821
and 4 more
#VU47769 - Improper input validation
CVE-2020-14762		 CWE-20 Medium
No
No
 20.2 21.10.2020 SB2020102103
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 20.2 21.10.2020 SB2020102103
SB2020102951
SB2021012078
and 8 more
#VU47774 - Improper input validation
CVE-2020-14763		 CWE-20 Medium
No
No
 20.2 21.10.2020 SB2020102103
#VU49403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26870		 CWE-79 Medium
No
No
 21.1.0.00.01 07.10.2020 SB2021011214
SB2021072052
SB2020100725
and 4 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 20.2 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 1 - 20 out of 33