CVE-2018-3231

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3219

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3224

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3226

CVE-2018-3226 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Connected documents confirm the affected package and versions: Oracle Outside In Technology 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated attacker with network access via HTTP ...

CVE-2018-3238

Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 is affected by a cross-site scripting vulnerability in the WebCenter Sites component (subcomponent: Advanced UI). The vulnerability, described as easily exploitable, could allow a high-privileged attacker with network access over HTTP to execute...

CVE-2018-3228

CVE-2018-3228 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Attack: unauthenticated remote attacker with network access via HTTP can trigger a hang or crash (DoS) and potentially read a subset ...

CVE-2018-3213

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Docker Images. The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3201

CVE-2018-3201 affects Oracle WebLogic Server (Fusion Middleware) specifically the WLS Core Components in version 12.2.1.3. The vulnerability allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially resulting in a takeover of the server (high/critica...

CVE-2018-3168

Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware subcomponent: Core Components. The supported version that is affected is 11.1.1.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

CVE-2018-3220

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3223

CVE-2018-3223 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The vulnerability affects the 8.5.3 and 8.5.4 releases of Outside In Technology and can allow an unauthenticated attacker with network access via HTTP to cause a hang or crash (denial of ser...

CVE-2018-3246

CVE-2018-3246 affects Oracle WebLogic Server (Fusion Middleware), specifically the Web Services subcomponent (WLS - Web Services). The vulnerability is exploitable remotely by an unauthenticated attacker over HTTP and targets affected versions 12.1.3.0 and 12.2.1.3, potentially leading to unautho...

CVE-2018-3152

CVE-2018-3152 affects Oracle GlassFish Server 3.1.2 in the Administration component. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or complete denial-of-service of the GlassFish server. Documented impact is an availability loss (CVSSv3 base 7.5)...

CVE-2018-3230

CVE-2018-3230 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The vulnerability affects Oracle Outside In Technology 8.5.3 and 8.5.4 and can allow an unauthenticated remote attacker with network access via HTTP to cause a hang or crash (DoS) and read a...

CVE-2018-3219

CVE-2018-3219 involves Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The initial record specifies affected versions 8.5.3 and 8.5.4 with network-accessible, unauthenticated access requiring user interaction. Connected IBM and vendor pages confirm that multipl...

CVE-2018-3147

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3147

CVE-2018-3147 affects the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware. Affected versions are 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle Outside In data; exploitation...

CVE-2018-3234

CVE-2018-3234 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware; IBM Rational DOORS Next Generation 6.0.6 and prior Rational DOORS releases using OIT 8.5.3/8.5.4 are affected. Reported impact is denial of service (hangs/crashes) and unauthorized data read when ...

CVE-2018-3233

CVE-2018-3233 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Vulnerable in 8.5.3 and 8.5.4. An unauthenticated attacker with network access via HTTP can potentially cause a hang or crash (DOS) and unauthorized read access to data in Outside In Technolo...