22.2 / November 10, 2022
|Operating system||Windows, Linux, Oracle Solaris, HP-UX, IBM AIX|
|Type||Oracle database development environment|
|License||Oracle Technical Network License (proprietary)|
Oracle APEX (also known as APEX or Oracle Application Express) is an enterprise low-code development platform from Oracle Corporation that is used to develop and deploy web applications on Oracle databases. APEX provides a web-based integrated development environment (IDE) that uses wizards, drag-and-drop layout, and property editors to build applications and pages.
APEX intends to simplify the process of creating web applications that serve as a frontend to a database server, among other things.
APEX is a fully-supported no-cost feature of the Oracle Database and can be installed anywhere Oracle Database runs. APEX is also offered on Oracle's Cloud across various services including Autonomous Database Cloud Services and the stand-alone APEX Application Development service.
Oracle APEX can be installed on any Oracle database from version 9.2 or higher, and starting from Oracle 11g it is installed with the database by default. APEX 4.0 and higher can be installed on an Oracle 10.2.0.3 or higher database. APEX 5.0 and higher can be installed on all editions (SE1, SE, and EE) of the Oracle database, 188.8.131.52 or higher with a valid Oracle Database Technical Support agreement; From APEX 18.1, the minimum database version is 184.108.40.206. It can also be used with Oracle Database 11g Express Edition (XE), but is supported through the Oracle Technology Network discussion forum, and not through Oracle Support Services.
|HTML DB||1.5||2004||First release.|
|HTML DB||1.6||2004||Added themes.|
|HTML DB||2.0||2005||Added SQL Workshop.|
|Application Express||2.1||January 2006||HTMLDB was renamed to APEX. Version 2.1 of APEX was bundled with the free Oracle Express Edition (XE) database.|
|Application Express||2.2||2006||Packaged Applications.|
|Application Express||3.0||2007||This version featured several new features, including PDF Printing, Flash charting and Access Application Migration.|
|Application Express||3.0.1||July 2007||This version could also be installed into an Oracle XE database.|
|Application Express||3.1||Spring 2008||This included a new major feature known as Interactive Reporting (enabled end-users to customize a report without programmer intervention, using techniques such as filtering, sorting, group-by, choosing displayed columns, etc. The user can even save multiple versions of their customized reports. The programmer can limit which features are enabled). Also added support for BLOB data type.|
|Application Express||3.2||2009||Forms conversion.|
|Application Express||4.1||August 2011||Notable new features included improved (customized) error handling, use of ROWID for updates, a data upload feature for end-users, and improved WebSheets (a hybrid of a spreadsheet and a Wiki, built using Apex itself).|
|Application Express||4.1.1||February 2012||Notable new features included new theme (cloudy) and various templates.|
|Application Express||4.2||October 2012||Notable new features such as application builder for mobile, mobile and responsive themes, and HTML5 support.|
|Application Express||4.2.1||December 2012||Bug Fixes.|
|Application Express||4.2.2||April 2013||Bug Fixes, Improved PDF printing, new Survey Builder packaged application.|
|Application Express||4.2.3||September 2013||This is a cumulative patch set for Application Express 4.2.0, Application Express 4.2.1, and Application Express 4.2.2.|
|Application Express||4.2.4||December 2013||This is a cumulative patch set for Application Express 4.2.0, Application Express 4.2.1, Application Express 4.2.2 and Application Express 4.2.3.|
|Application Express||4.2.5||April 2014||This is a cumulative patch set for Application Express 4.2.0, Application Express 4.2.1, Application Express 4.2.2, Application Express 4.2.3 and Application Express 4.2.4.|
|Application Express||4.2.6||September 2014||This is a cumulative patch set for Application Express 4.2.0, Application Express 4.2.1, Application Express 4.2.2, Application Express 4.2.3, Application Express 4.2.4 and Application Express 4.2.5.|
|Application Express||5.0||April 2015||Notable features are focused on developer productivity and improving the User Interface of user applications. This version introduces Page Designer, a browser-based IDE which provides drag and drop layouting of page components, property editor, and much more, reducing the need to go from page to page to make changes. Version 5.0 also introduces Universal Theme, a responsive user interface for user applications which can easily and extensively be customized using Template Options and Theme Roller (which enables on-the-fly theming of an application).|
|Application Express||5.0.1||July 2015||This is a cumulative patch set for Application Express 5.0.0.|
|Application Express||5.0.2||October 2015||This is a cumulative patch set for Application Express 5.0.0 and Application Express 5.0.1.|
|Application Express||5.0.3||December 2015||Application Express 5.0.3.|
|Application Express||5.0.4||July 2016||This is a cumulative patch set for Application Express 5.0.0 and Application Express 5.0.3|
|Application Express||5.1||December 2016||Notable features include a new "Interactive Grids" component which provides an editable grid, Oracle JET-based charting, updated Universal Theme with Live Template Options and RTL support, several UX enhancements, updates to Packaged Apps, and three new Productivity Apps: Quick SQL, REST Client Assistant, and Competitive Analysis.|
|Application Express||5.1.1||March 2017||This is a cumulative patch set for Application Express 5.1.0|
|Application Express||5.1.2||June 2017||This is a cumulative patch set for Application Express 5.1.0 and Application Express 5.1.1|
|Application Express||5.1.3||September 2017||This is a cumulative patch set for Application Express 5.1.0 - Application Express 5.1.2|
|Application Express||5.1.4||December 2017||This is a cumulative patch set for Application Express 5.1.0 - Application Express 5.1.3|
|Application Express||18.1.0||May 2018||Oracle has released the latest version of APEX and keeping in line with their naming convention APEX has jumped from version 5.1.4 to 18.1- Application Express 5.1.4|
|Application Express||18.2.0||September 2018||This release includes new features such as:
|Application Express||19.1.0||March 2019||This release includes new features such as:
|Application Express||19.2.0.00.18||November 2019||This release includes new features such as:
|Application Express||20.1.0.00.13||April 2020||This version includes the following features:
APEX + Redwood: The user interface of APEX and the App Builder has been refreshed to align with Redwood, Oracle's new user experience design system.
Faceted Search Enhancements: Allowing implement a cascading list of values, conditional facets, and compact count display
Friendly URLs: The URL syntax for APEX apps has been simplified to allow for friendlier URLs at runtime.
Improvements in Deployments and Exports: Automatic Backups, Export App as Zip and One-Click Remote App Deployment.
Native PDF Printing: You can now print PDF files directly from Interactive Grids.
Mega Menus: Render the navigation menu as a collapsible floating panel that displays all navigation items at once.
|Application Express||20.2.0.00.20||October, 2020||This release includes the following features:
|Application Express||21.1.0||May, 2021||This release of APEX introduces:
In addition, announces the APEX GitHub repository to find starter apps, sample apps, and plug-ins.
|Application Express||21.2.0||November 2021||This release includes new features such as:
Patch version 4 (APEX product version will be updated to 21.2.4), was last updated on February 28, 2022.
|APEX||22.1||May 2022||This release introduces new features such as:
|APEX||22.2||November 2022||This release introduces new features such as:
Oracle APEX has gone through many name changes since its inception in 2000. Names include:
APEX was created by Mike Hichwa, a developer at Oracle, after the development of his previous project, Web DB, started to diverge from his original vision. Although APEX shares some functionality with Web DB, it was developed from scratch, and there's no upgrade path from Web DB to APEX. When tasked with building an internal web calendar, Hichwa enlisted the help of Joel Kallman and started development on a project called Flows. Hichwa and Kallman co-developed the Web Calendar and Flows, adding features to Flows as they needed them to develop the calendar. Early builds of Flow had no front-end, so all changes to an application had to be made in SQL*Plus via inserts, updates and deletes.
APEX is extensively used internally by Oracle to develop its support sites. The AskTom knowledge base, online store, Dev Gym, and livesql run on APEX.
There is a common misconception that the abstracted nature of APEX applications results in a relatively secure user environment. However, APEX applications suffer from the same classes of application security flaws as other web applications based on more direct technologies such as PHP, ASP.net and Java.
The main classes of vulnerability that affect APEX applications are: SQL injection, Cross-site scripting (XSS), and Access Control.
APEX applications inherently use PL/SQL constructs as the base server-side language. As well as accessing data via PL/SQL blocks, an APEX application will use PL/SQL to implement authorization, and to conditionally display web page elements. This means that generally APEX applications suffer from SQL injection when these PL/SQL blocks do not correctly validate and handle malicious user input. Oracle implemented a special variable type for APEX called Substitution Variables (with a syntax of &NAME.) and these are not safe and lead to SQL Injection. Where the injection occurs within a PL/SQL block an attacker can inject an arbitrary number of queries or statements to execute. Escaping special characters and using bind variables is the right way to code to ensure no XSS and SQL injection.
Cross-Site Scripting vulnerabilities arise in APEX applications just like other web application languages. Oracle provides the htf.escape_sc() function to escape user data that is displayed within a rendered HTML response. The reports that APEX generates also provide protection against XSS through the Display As setting on report columns. Originally the default was for reports to be created without any escaping of the columns, although recent versions now set the column type to escape by default. Column definitions can be queried programmatically to check for columns that do not escape the value.
Since APEX 4.0, the Application Builder interface provides some limited assessment of the security posture through the Advisor utility.
Oracle APEX can be run inside Oracle Database Express Edition (XE), a free entry-level database. Although the functionality of APEX isn't intentionally limited when running on XE, the limitations of the database engine may prevent some APEX features from functioning. Also, Oracle XE has limits for CPU, memory and disk usage.
With Oracle APEX and Autonomous Database, the configuration, patching, monitoring, and upgrading of all Oracle APEX components is fully managed by Oracle. Developers can therefore focus on application development and deployment without any hassles of upkeep or manual maintenance. The feature functionality includes Oracle SQL Developer Web (database actions), Oracle REST Data Services (ORDS), Oracle XML DB features, Spatial and more.
Oracle APEX Application Development, also known as APEX Service is a fully managed low-code application development and deployment platform in Oracle Cloud Infrastructure (OCI). With this service, developers get APEX and an underlying Oracle Autonomous Database. This service also includes SQL Developer Web (Database Actions) for database actions and Oracle REST Data Services (ORDS).
Michael Hichwa is the original developer and architect of Oracle Application Express (APEX), aka HTML DB. Michael created APEX as a 100% rewrite of an earlier browser-based application development tool he also created, called Oracle WebDB. He had invaluable technical assistance and guidance from Tom Kyte and the addition of Joel Kallman as a co-developer. Michael and Joel have led APEX developments efforts since 1999
((cite web)): CS1 maint: url-status (link)
((cite web)): CS1 maint: url-status (link)