CVE-2005-1383

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 30.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-05-03 · updated 2026-06-16

Description

The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.

Affected products

Oracle Application Server: 10.1.0.2, 10.1.0.3, 10.1.0.3.1, 10.1.2

References

http://marc.info/?l=bugtraq&m=111472266123952&w=2
http://secunia.com/advisories/15143
http://www.osvdb.org/15908
http://www.red-database-security.com/advisory/oracle_webcache_bypass.html
http://www.securityfocus.com/bid/13418
https://exchange.xforce.ibmcloud.com/vulnerabilities/20311
http://marc.info/?l=bugtraq&m=111472266123952&w=2
http://secunia.com/advisories/15143
http://www.osvdb.org/15908
http://www.red-database-security.com/advisory/oracle_webcache_bypass.html
http://www.securityfocus.com/bid/13418
https://exchange.xforce.ibmcloud.com/vulnerabilities/20311

Get alerted when CVE-2005-1383 or the next vulnerability affects your stack