EUVD-2013-0407

Malware in sbrugna...

Oracle Business Transaction Management 'FlashTunnelService' 'WriteToFile' Message RCE

The remote web server is hosting a version of Oracle Business Transaction Management that is affected by a remote code execution vulnerability. The 'FlashTunnelService' web service does not require authentication and exposes the 'WriteToFile' function, which can allow a remote, unauthenticated...

Oracle Business Transaction Management Detection

Binary data oraclebusinesstransactionmanagementdetect.nbin...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version...

Oracle Business Transaction Management FlashTunnelService Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CVE-2013-0396

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

CVE-2013-0360

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

Code injection

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...

Code injection

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

CVE-2013-0359

CVE-2013-0359 affects the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control (versions 6.5, 11.1, 12.1.0.2). The vulnerability is described as unspecified with impact to confidentiality, integrity, and availability via unknown vectors related to Business ...

CVE-2013-0360

Technical details for CVE-2013-0360 are not publicly disclosed in the provided documents. Monitor for updates; no affected product/version, exploit info, vectors, or remediation are specified here.

CVE-2013-0396

Technical details about CVE-2013-0396 are not publicly available in the provided documents; monitor for updates.

CVE-2013-0396

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

PT-2013-2258

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 6.5, 11.1, and 12.1.0.2 Description The issue affects the integrity of the system, related to Business Transaction Management in the Application Performance Management APM component. The exact...

PT-2013-2294

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 6.5, 11.1, and 12.1.0.2 Description The issue affects the integrity of the system, related to Business Transaction Management in the Application Performance Management APM component...

CVE-2013-0359: Undefined Security Weakness

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...

CVE-2013-0360: Undefined Security Weakness

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

PT-2013-2257

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 6.5, 11.1, and 12.1.0.2 Description The issue affects the confidentiality, integrity, and availability of the system. It is related to Business Transaction Management in the APM - Application...

CVE-2013-0396: Undefined Security Weakness

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...