Threats affecting pkg:maven/com.oracle/apex-sample-applications

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-21931 · Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle APEX Sample Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle APEX Sample Applications, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle APEX Sample Applications accessible data as well as unauthorized read access to a subset of Oracle APEX Sample Applications accessible data. Medium5.4EPSS 0.2%2026-01-20CVE Database V5 CVE-2026-21931 is a medium severity vulnerability affecting Oracle APEX Sample Applications versions 23.2.0 through 24.2.1. It allows a low privileged attacker with network access via HTTP to perform unauthorized read and write operations on accessible data within these sample applications. Exploitation requires user interaction from a person other than the attacker, and successful attacks may impact additional Oracle products beyond the sample applications. The vulnerability has a CVSS 3.1 base score of 5.4, reflecting limited confidentiality and integrity impacts but no availability impact. EPSS 0.2%Vulnerability	CVE Database V5	2026-01-20

Page 1 of 1