CVE-2017-10148

CVE-2017-10148 affects Oracle WebLogic Server (Core Components) in 10.3.6.0, 12.1.3.0, 12.2.1.1, 12.2.1.2. The connected ERPScan entry includes a PoC demonstrating anonymous log injection over a T3 connection, enabling an unauthenticated remote attacker to inject data into WebLogic logs. The vuln...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10048

CVE-2017-10048 affects Oracle Fusion Middleware’s Oracle Enterprise Repository Web Interface, with affected versions 11.1.1.7.0 and 12.1.3.0.0. The vulnerability enables unauthenticated network access via HTTP to compromise Oracle Enterprise Repository, potentially granting unauthorized read/writ...

CVE-2017-10063

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10030

CVE-2017-10030 affects Oracle Fusion Middleware BI Publisher Web Server (component: BI Publisher) version 11.1.1.7.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise BI Publisher; however, successful exploitation requires user interaction. The impa...

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2017-10157

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10041

Oracle BI Publisher in Oracle Fusion Middleware is affected by CVE-2017-10041, impacting the BI Publisher Web Server component. Affected versions are 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability allows an unauthenticated or low-privileged attacker with network access via HTTP to comp...

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2017-10024

CVE-2017-10024 affects Oracle Fusion Middleware BI Publisher (subcomponent Layout Tools), specifically BI Publisher 11.1.1.7.0. The vulnerability—addressed in the Oracle July 2017 CPU—allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, with potential unauth...

CVE-2017-10024

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Layout Tools. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10048

Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware subcomponent: Web Interface. Supported versions that are affected are 11.1.1.7.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2017-10029

Oracle BI Publisher in Oracle Fusion Middleware (Web Server subcomponent) is affected by CVE-2017-10029. Affected product/version: BI Publisher (11.1.1.7.0) running on Oracle Fusion Middleware. Vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publishe...

CVE-2017-10141

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside I...

CVE-2017-10178

CVE-2017-10178 affects Oracle WebLogic Server (Web Container) in Oracle Fusion Middleware. Affected products/versions per the record are WebLogic Server 10.3.6.0, 12.1.3.0, 12.2.1.1, and 12.2.1.2. The vulnerability allows an unauthenticated remote attacker to access the server over HTTP and could...

CVE-2017-10178

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10035

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successfu...

CVE-2017-10059

CVE-2017-10059 affects Oracle Fusion Middleware BI Publisher (Mobile Service) with version 11.1.1.7.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, requiring user interaction, and can lead to unauthorized data access and possible un...

CVE-2017-10157

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10196

CVE-2017-10196 is a vulnerability in the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware. Affected version is 8.5.3.0. An unauthenticated attacker with network access via HTTP can cause the Oracle Outside In Technology to hang or crash (complete DOS) a...