Lucene search
K

16 matches found

0day.today
0day.today
added 2018/01/29 12:0 a.m.169 views

Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Exploit

The Oracle WebLogic WLS WSAT component is vulnerable to an XML deserialization remote code execution vulnerability. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0...

5CVSS8.3AI score0.99934EPSS
Exploits45
OSV
OSV
added 2017/08/08 3:29 p.m.3 views

CVE-2017-10156

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

8.2CVSS7.3AI score0.01929EPSS
Exploits0References3
OSV
OSV
added 2017/08/08 3:29 p.m.2 views

CVE-2017-10040

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.2CVSS7.3AI score
Exploits0References3
OSV
OSV
added 2017/08/08 3:29 p.m.2 views

CVE-2017-10058

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Administration. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker...

6.9CVSS7.3AI score
Exploits0References3
Packet Storm
Packet Storm
added 2017/07/22 12:0 a.m.39 views

Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS

Oracle Web Center XSS Details ======================================================================================== Product: Oracle Web Center Versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 Security-Risk: High Remote-Exploit: yes Vendor-URL: https://www.oracle.com/ CVE-ID: CVE-2017-10075 CVSS: 8....

8.3AI score0.17558EPSS
Exploits1
CNVD
CNVD
added 2017/07/20 12:0 a.m.2 views

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher (CNVD-2017-17498)

Oracle Fusion Middleware is a comprehensive middleware product family consisting of SOA and middleware products.BI Publisher is one of the reporting components. Oracle BI Publisher versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 contain a security vulnerability in the implementation of th...

8.2CVSS6.8AI score0.01929EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/20 12:0 a.m.4 views

Oracle WebCenter Content Unauthorized Operation Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

8.2CVSS8.1AI score0.01756EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/19 12:0 a.m.0 views

Unspecified Vulnerability in Oracle BI Publisher (CNVD-2017-18118)

Oracle BI Publisher is the business intelligence publishing system. Oracle BI Publisher 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0 contains a security vulnerability in its implementation, which can be exploited by attackers to compromise the confidentiality and integrity of the system...

7.6CVSS6.8AI score0.01385EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/07/19 12:0 a.m.24 views

Oracle BI Publisher Multiple Unspecified Vulnerabilities - 03 (cpujul2017)

Oracle BI Publisher is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.2CVSS7.3AI score0.01929EPSS
Exploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.2 views

CVE-2017-3598

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

3.1CVSS5.8AI score
Exploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.2 views

CVE-2017-3595

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

7.1CVSS5.8AI score0.01583EPSS
Exploits0References3
OSV
OSV
added 2017/04/24 7:59 p.m.2 views

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

7.3CVSS5.8AI score0.01665EPSS
Exploits0References3
CNVD
CNVD
added 2017/04/20 12:0 a.m.4 views

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05986)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

8.6CVSS6.8AI score0.01849EPSS
Exploits0References1
CNVD
CNVD
added 2017/04/20 12:0 a.m.1 views

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05988)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

9CVSS6.7AI score0.02295EPSS
Exploits0References1
CVE
CVE
added 2016/10/25 2:0 p.m.45 views

CVE-2016-5602

Technical details about CVE-2016-5602 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.

5.7CVSS5.1AI score0.01618EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2016/10/25 2:0 p.m.8 views

CVE-2016-8281

Unspecified vulnerability in the Oracle Platform Security for Java component in Oracle Fusion Middleware 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-553...

5.7AI score0.01814EPSS
Exploits0References3
Rows per page
Query Builder