6154 matches found
CVE-2019-2970
The CVE-2019-2970 entry describes a vulnerability in Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware. Affected product/version: Outside In Technology 8.5.4. The vulnerability is exploitable over the network with unauthenticated access via HTTP and can lead to una...
CVE-2019-2970
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
CVE-2019-2971
CVE-2019-2971 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware, specifically the 8.5.4 release. The vulnerability allows unauthenticated network access (HTTP) to Outside In Technology, potentially enabling unauthorized updates, inserts, or deletes to certa...
CVE-2019-2971
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
CVE-2019-2972
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
CVE-2019-2970
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...
CVE-2019-2943
CVE-2019-2943 affects Oracle Data Integrator Studio (component) in Oracle Fusion Middleware, version 12.2.1.3.0. The vulnerability allows a low-privileged user with network access via HTTP to access or compromise Oracle Data Integrator data. The CVSS v3.0 base score is 6.5 (Confidentiality impact...
CVE-2019-2943
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Studio. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Data Integrator. Successful...
CVE-2019-2906
Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2907
Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware component: SOAP with Attachments API for Java. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...
CVE-2019-2906
Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2907
CVE-2019-2907 affects Oracle Fusion Middleware Web Services (SOAP with Attachments API for Java) with version 12.2.1.3.0. A remote, unauthenticated attacker can exploit over HTTP to write or delete data and read data via Oracle Web Services. Root cause and exact exploit details are not expanded b...
CVE-2019-2905
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Installation. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2905
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Installation. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2906
CVE-2019-2906 affects Oracle BI Publisher (Mobile Service) in Oracle Fusion Middleware. Affected versions include 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher; successful attacks require user i...
CVE-2019-2907
Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware component: SOAP with Attachments API for Java. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...
CVE-2019-2904
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2019-2886
Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...
CVE-2019-2904
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2019-2889
CVE-2019-2889 affects Oracle WebLogic Server 12.2.1.3.0 (component: Sample apps). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized update/insert/delete and unauthorized read access to WebLogic data. Thi...