| Package | Affected versions | Patched versions |
|---|---|---|
| html db | = 1.3= 1.3.6 |
The manual installation of Oracle HTML DB (HTMLDB) 1.3 through 1.3.6 stores the SYS password in install.lst in plaintext, which allows local users to gain privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free