Oracle APEX suffers from a SQL injection vulnerability in the function wwv_flow_security.check_db_password.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57842/oracle_apex_sql_injection_check_db_password.txt
Source: https://packetstormsecurity.com/files/57842/oracle_apex_sql_injection_check_db_password.txt.html