CVE Feed

    Dashboard / CVE / CVE-2008-1811

    CVE-2008-1811

    Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that APEX01 is for insufficient authorization checks for SQL commands in the run_ddl function in flows_030000.wwv_execute_immediate, allowing privilege escalation by certain non-DBA remote authenticated users.

    Published:Apr 16, 2008
    Last Modified:Apr 23, 2026
    EPS:Apr 16, 2008
    EPSS Score:0.00771
    CVSS Score:5.5

    Affected Products

    Vendor
    Oracle
    Product
    Application Express

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-50067 (CVSS 9) — Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions th…
    CVE-2025-21557 (CVSS 5.4) — Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23…
    CVE-2024-21261 (CVSS 4.9) — Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23…
    CVE-2023-21983 (CVSS 5.6) — Vulnerability in the Application Express Administration product of Oracle Application Express (component: None…
    CVE-2023-21975 (CVSS 9) — Vulnerability in the Application Express Customers Plugin product of Oracle Application Express (component: Us…
    CVE-2023-21974 (CVSS 9) — Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component…
    CVE-2022-24729 (CVSS 6.5) — CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contai…
    CVE-2022-24728 (CVSS 5.4) — CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in t…
    CVE-2021-41165 (CVSS 8.2) — CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in th…
    CVE-2021-41164 (CVSS 8.2) — CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in t…

    References

    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=690
    http://secunia.com/advisories/29829
    http://secunia.com/advisories/29874
    http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
    http://www.securityfocus.com/archive/1/491024/100/0/threaded
    http://www.securitytracker.com/id?1019855
    http://www.vupen.com/english/advisories/2008/1233/references
    http://www.vupen.com/english/advisories/2008/1267/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41988
    http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=690
    http://secunia.com/advisories/29829
    http://secunia.com/advisories/29874
    http://www.oracle.com/technetwork/topics/security/cpuapr2008-082075.html
    http://www.securityfocus.com/archive/1/491024/100/0/threaded
    http://www.securitytracker.com/id?1019855
    http://www.vupen.com/english/advisories/2008/1233/references
    http://www.vupen.com/english/advisories/2008/1267/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41858
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41988

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High