Product by Oracle

    Oracle Application Express

    47 known vulnerabilities in Oracle Application Express (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    47

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Application Express (Oracle)
    CriticalCVE-2020-11023

    Potential XSS vulnerability in jQuery

    In CISA KEValso in 48 other products

    		6.9
    MediumCVE-2021-41184

    XSS in the `of` option of the `.position()` util

    also in 27 other products

    		6.5
    MediumCVE-2021-41182

    XSS in the `altField` option of the Datepicker widget

    also in 29 other products

    		6.5
    MediumCVE-2019-11358

    Drupal core: security vulnerability

    also in 89 other products

    		6.1
    MediumCVE-2016-7103

    Jquery UI: Cross-Site Scripting (XSS)

    also in 12 other products

    		6.1
    MediumCVE-2021-41183

    XSS in `*Text` options of the Datepicker widget

    also in 28 other products

    		6.5
    MediumCVE-2020-26870

    DOMPurify: Cross-Site Scripting (XSS)

    also in 4 other products

    		6.1
    MediumCVE-2020-9281

    CKEditor: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.1
    HighCVE-2020-7760

    Regular Expression Denial of Service (ReDoS)

    also in 3 other products

    		5.3
    MediumCVE-2016-3467

    Oracle Application Express: security vulnerability

    		5.8
    HighCVE-2022-24729

    Regular expression Denial of Service in dialog plugin

    also in 9 other products

    		6.5
    MediumCVE-2021-26272

    CKEditor: security vulnerability

    also in 9 other products

    		6.5
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    HighCVE-2021-41165

    HTML comments vulnerability allowing to execute JavaScript code

    also in 9 other products

    		8.2
    MediumCVE-2021-26271

    CKEditor: security vulnerability

    also in 6 other products

    		6.5
    MediumCVE-2020-27193

    CKEditor: Cross-Site Scripting (XSS)

    also in 8 other products

    		6.1
    HighCVE-2021-41164

    Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

    also in 10 other products

    		8.2
    HighCVE-2021-32723

    Regular Expression Denial of Service (ReDoS) in Prism

    also in 1 other product

    		7.4
    MediumCVE-2016-3448

    Oracle Application Express: security vulnerability

    		6.1
    HighCVE-2021-37695

    Execution of JavaScript code using malformed HTML in ckeditor

    also in 12 other products

    		7.3
    HighCVE-2021-32808

    Cross-site scripting in ckeditor via abuse of undo functionality

    also in 13 other products

    		7.6
    CriticalCVE-2023-21975

    Oracle Application Express (APEX): security vulnerability

    also in 1 other product

    		9.0
    CriticalCVE-2023-21974

    Oracle Application Express (APEX): security vulnerability

    also in 1 other product

    		9.0
    MediumCVE-2018-2699

    Oracle Application Express: security vulnerability

    also in 1 other product

    		6.1
    MediumCVE-2022-24728

    Cross-site Scripting in CKEditor4

    also in 9 other products

    		5.4

    All vulnerabilities in search

    All products by Oracle