EUVD-2013-0407

Malware in sbrugna...

Oracle Business Transaction Management Detection

Binary data oraclebusinesstransactionmanagementdetect.nbin...

Oracle Business Transaction Management 'FlashTunnelService' 'WriteToFile' Message RCE

The remote web server is hosting a version of Oracle Business Transaction Management that is affected by a remote code execution vulnerability. The 'FlashTunnelService' web service does not require authentication and exposes the 'WriteToFile' function, which can allow a remote, unauthenticated...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version...

Oracle Business Transaction Management FlashTunnelService Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CVE-2013-0396

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

CVE-2013-0360

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Business Transaction Management...

Code injection

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

Code injection

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

CVE-2013-0396

Technical details about CVE-2013-0396 are not publicly available in the provided documents; monitor for updates.

CVE-2013-0359

CVE-2013-0359 affects the APM - Application Performance Management component in Oracle Enterprise Manager Grid Control (versions 6.5, 11.1, 12.1.0.2). The vulnerability is described as unspecified with impact to confidentiality, integrity, and availability via unknown vectors related to Business ...

CVE-2013-0396

Unspecified vulnerability in the Application Performance Management APM component in Oracle Enterprise Manager Grid Control 6.5, 11.1, and 12.1.0.2 allows remote attackers to affect integrity via unknown vectors related to Business Transaction Management, a different vulnerability than...

CVE-2013-0360

Technical details for CVE-2013-0360 are not publicly disclosed in the provided documents. Monitor for updates; no affected product/version, exploit info, vectors, or remediation are specified here.

Oracle Business Transaction Management Server 12.1.0.2.7 File Upload

File upload vulnerability in Oracle Business Transaction Management Server FlashTunnel Service Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Oracle Business Transaction Management Arbitrary File Creation

A directory traversal vulnerability has been reported in Oracle Business Transaction Management Server. The vulnerability is due to insufficient validation of user input while processing crafted SOAP requests sent to the affected service. A remote attacker can exploit this issue by sending a...

Oracle Business Transaction Management Arbitrary File Deletion

A directory traversal vulnerability has been reported in Oracle Business Transaction Management Server...

Oracle Business Transaction Management FlashTunnelService - Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle Business Transaction Managemen...

Oracle BTM FlashTunnelService Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Oracle Business Transaction Management FlashTunnelService WriteToFile Vulnerability

Added: 08/17/2012 BID: 54839 Background Oracle Business Transaction Management BTM is a component of several Oracle Enterprise Manager Management Packs, including WebLogic Server Management Pack Enterprise Edition. Oracle BTM provides capability in three key areas: transaction visibility,...