CVE-2005-1383: Oracle Application Server

High severity, CVSS 7.5. EPSS: 30.6% chance of exploitation in the next 30 days.

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

Affected products

• Oracle Application Server: version 10.1.0.2 only; version 10.1.0.3 only; version 10.1.0.3.1 only; version 10.1.2 only

Published 2005-05-03. Last modified 2026-06-16.