CVE-2005-4550

no score yetEPSS 6.1%

oracle application server discussion forum portlet: no CVSS score yet. EPSS 6.1% chance of exploitation in the next 30 days.

The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00).

EPSS: 6.1% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
Published: 2005-12-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

oracle:application_server_discussion_forum_portlet

References

http://marc.info/?l=full-disclosure&m=113532633229270&w=2
http://securityreason.com/securityalert/297
http://securitytracker.com/id?1015406
http://www.securityfocus.com/bid/16048
http://www.vupen.com/english/advisories/2005/3085

Check your stack JSON