Lucene search
+L

13 matches found

Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•10 views

PT-2024-40106 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal versions prior to 8.7.11 Drupal versions 8.8.x prior to 8.8.1 Description: The Media Library module has a security issue where it does not sufficiently restrict access to media items in certain configurations. Recommendations: If you a...

4.3CVSS7.2AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/01/22 12:00 a.m.•20 views

The vulnerability of the Advanced UI component of the Oracle WebCenter Sites application allows a malicious actor to gain access to read, modify, or delete data.

The vulnerability of the Advanced UI component in Oracle WebCenter Sites applications relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, or delete data...

6.4CVSS6.9AI score0.00327EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:46 a.m.•10 views

SUSE CVE-2012-3183

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a differen...

4.9CVSS6.3AI score0.0421EPSS
SaveExploits5References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:46 a.m.•13 views

SUSE CVE-2012-3186

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a differen...

4.9CVSS6.3AI score0.0421EPSS
SaveExploits5References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:46 a.m.•11 views

SUSE CVE-2012-3184

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI...

4.3CVSS6.5AI score0.04455EPSS
SaveExploits5References3
BDU FSTEC
BDU FSTEC
•added 2020/08/12 12:00 a.m.•24 views

The vulnerability of the Advanced User Interface component of the Oracle WebCenter Sites application allows a malicious actor to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Advanced User Interface component of the Oracle WebCenter Sites application for online user services is related to the lack of protective measures for the website structure. Exploiting this vulnerability may allow an attacker, operating remotely, to modify, add, or delete...

6.1CVSS6.8AI score0.01083EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/15 12:00 a.m.•7 views

CVE-2020-14613: Improper Neutralization of Input During Web Page Generation

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

6.1CVSS5.7AI score0.01083EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/14 12:00 a.m.•3 views

PT-2020-3459

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 12.2.1.3.0 through 12.2.1.4.0 Description The issue is related to the Advanced User Interface component of Oracle WebCenter Sites, where the structure of web pages is not properly protected. This can be exploite...

6.1CVSS0.01083EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/02/11 12:00 a.m.•19 views

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites for online user services allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Advanced UI interface of Oracle WebCenter Sites for online user services is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP...

6.1CVSS6.7AI score0.0109EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/04/30 12:00 a.m.•24 views

The vulnerability of the Advanced UI sub-component of the integrated customer service platform for Internet applications, Oracle WebCenter Sites, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Advanced UI sub-component of the integrated customer service platform for Internet applications, Oracle WebCenter Sites, is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...

8.6CVSS7.6AI score0.72402EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2017/04/27 12:00 a.m.•15 views

Oracle WebCenter Sites Unauthorized Operation Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

7CVSS6.8AI score0.01443EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/04/26 12:00 a.m.•14 views

Oracle WebCenter Sites Unauthorized Operation Vulnerability (CNVD-2017-06625)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

7.5CVSS6.8AI score0.01583EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/03/28 12:00 a.m.•6 views

CVE-2008-1543: Undefined Security Weakness

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

7.5CVSS5.9AI score0.01187EPSS
SaveExploits0References2
Rows per page
Query Builder