CVE-2009-0981

Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement.

• http://osvdb.org/53738
• http://secunia.com/advisories/34693
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.red-database-security.com/advisory/apex_password_hashes.html
• http://www.securityfocus.com/archive/1/502724/100/0/threaded
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022052
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://www.exploit-db.com/exploits/8456
• http://osvdb.org/53738
• http://secunia.com/advisories/34693
• http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html
• http://www.red-database-security.com/advisory/apex_password_hashes.html
• http://www.securityfocus.com/archive/1/502724/100/0/threaded
• http://www.securityfocus.com/bid/34461
• http://www.securitytracker.com/id?1022052
• http://www.us-cert.gov/cas/techalerts/TA09-105A.htmlUS Government Resource
• https://www.exploit-db.com/exploits/8456

Published

Apr 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0975Unspecified vulnerability in the Workspace Manager component…
• CVE-2009-0976Unspecified vulnerability in the Workspace Manager component…
• CVE-2009-0977Unspecified vulnerability in the Advanced Queuing component …
• CVE-2009-0978Unspecified vulnerability in the Workspace Manager component…
• CVE-2009-0979Unspecified vulnerability in the Resource Manager component …
• CVE-2009-0980Unspecified vulnerability in the SQLX Functions component in…
• CVE-2009-0982Unspecified vulnerability in the PeopleSoft Enterprise Peopl…
• CVE-2009-0983Unspecified vulnerability in the Portal component in Oracle …
• CVE-2009-0984Unspecified vulnerability in the Database Vault component in…
• CVE-2009-0985Unspecified vulnerability in the Core RDBMS component in Ora…
• CVE-2009-0986Unspecified vulnerability in the Workspace Manager component…
• CVE-2009-0987Unspecified vulnerability in the Upgrade component in Oracle…