CVE-2017-10391

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10385

CVE-2017-10385 affects Oracle GlassFish Server’s Web Container in Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, with successful attacks requiring user interaction. This can lead to unauthorized...

CVE-2017-10400

CVE-2017-10400 affects Oracle GlassFish Server within Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). Affected version is 3.1.2. The vulnerability reportedly allows an unauthenticated, network-accessible attacker over HTTP to compromise GlassFish Server, with the...

CVE-2017-10400

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10033

CVE-2017-10033 affects Oracle WebCenter Sites (Support Tools subcomponent) in Oracle Fusion Middleware. Vulnerable versions are 11.1.1.8.0 and 12.2.1.2.0. The issue enables an unauthenticated attacker with access to the hosting infrastructure to perform unauthorized read, update, insert, or delet...

CVE-2017-10385

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10369

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10060

This CVE (CVE-2017-10060) affects Oracle Business Intelligence Enterprise Edition (OBIEE) within Oracle Fusion Middleware, specifically the Analytics Web General subcomponent. Affected versions are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability can be exploited by an unauth...

CVE-2017-10360

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10393

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10154

The CVE-2017-10154 vulnerability affects Oracle Fusion Middleware’s Oracle Access Manager (Web Server Plugin) in version 11.1.2.3.0. The issue allows an unauthenticated, network-accessible attacker (via HTTP) to read a subset of data due to a flaw in the Web Server Plugin, with CVSSv3.0 base scor...

CVE-2017-10270

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10271

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2017-10385

Removed by vendor...

CVE-2017-10051

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached t...

CVE-2017-10259

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2017-10391

CVE-2017-10391 affects the Oracle GlassFish Server Administration subcomponent. Affects Oracle Fusion Middleware GlassFish Server versions 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read, update, insert, or delete data and may enable pa...

CVE-2017-10352

CVE-2017-10352 affects Oracle WebLogic Server (Oracle Fusion Middleware) in multiple supported versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0, 12.2.1.3.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker targeting the WebLogic Web Services/WLS component...

CVE-2017-10393

CVE-2017-10393 affects Oracle GlassFish Server Web Container in Oracle Fusion Middleware (versions 3.0.1 and 3.1.2). The vulnerability permits unauthenticated, network-accessible exploitation via HTTP, with human interaction required, leading to possible unauthorized updates/deletes and reads, pl...

CVE-2017-10166

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware subcomponent: C Oracle SSL API. Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromis...