CVE-2011-3525: Oracle Database Server

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.

Affected products

• Oracle Database Server: version 3.2 only; version 4.0 only

Published 2011-10-18. Last modified 2026-06-16.