CVE-2005-3449: Oracle Application Server

High severity, CVSS 10.0. EPSS: 5.8% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Oracle Application Server 9.0 up to 10.1.2.0 have unknown impact and attack vectors, as identified by Oracle Vuln# (1) AS02 in Containers for J2EE, (2) AS07 in Internet Directory, (3) AS09 in Report Server, and (4) AS11 in Web Cache.

Affected products

• Oracle Application Server: version 9.0 only; version 9.0.2.3 only; version 9.0.3.1 only; version 9.0.4.1 only; version 9.0.4.2 only; version 10.1.2.0.0 only; …

Published 2005-11-02. Last modified 2026-06-16.