CVE-2014-4211

CVE-2014-4211 : Unspecified vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware 11.1.1.7–11.1.1.8 could allow remote attackers to affect integrity via unknown vectors related to Portlet Services. No concrete exploit details, affected versions beyond those listed, or...

CVE-2014-4222

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0 and 12.1.2.0 allows remote authenticated users to affect confidentiality via vectors related to plugin 1.1...

CVE-2014-4212

Unspecified vulnerability in the Oracle Fusion Middleware component in Oracle Fusion Middleware 11.1.1.7 allows remote attackers to affect confidentiality via unknown vectors related to Process Mgmt and Notification...

CVE-2014-4211

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

CVE-2014-2480

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481...

CVE-2014-4202

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services...

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

CVE-2014-2479

CVE-2014-2479 is an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting WLS - Web Services. Affected versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The IBM bulletin describes a vulnerability in Oracle WebLogic Server related to the Web Services c...

CVE-2014-2493

Technical details for CVE-2014-2493 are not publicly available in the provided connected documents beyond the shared description. Monitor for updates from official advisories and vulnerability databases.

CVE-2014-4212

CVE-2014-4212 affects Oracle Fusion Middleware 11.1.1.7. The vulnerability is in the Fusion Middleware component relating to Process Management and Notification, allowing remote attackers to affect confidentiality via unknown vectors. The connected documents confirm the CVE’s inclusion in Oracle’...

CVE-2014-2481

Technical details for CVE-2014-2481 are not publicly available in the provided documents. Monitor for updates.

Oracle July 2014 Critical Patch Update

Never one to skimp on patches, Oracle is expected to release 113 of them tomorrow as part of its quarterly Critical Patch Update. The company also clarified that Java 7 versions will continue to work on the end-of-life Microsoft Windows XP platform and Oracle security updates for Java on XP...

Oracle Event Processing FileUploadServlet Arbitrary File Upload Exploit

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system. This Metasploit module exploits an Arbitrary File Upload vulnerability in Oracle Event Processing...

Oracle Data Quality and Profiling Client Multiple Vulnerabilities (April 2014 CPU)

According to the version of the Oracle Data Quality and Profiling client installed on the remote host, it is affected by multiple unspecified ActiveX control vulnerabilities. By tricking a user into opening a specially crafted document, an attacker may be able to execute arbitrary code...

CVE-2014-2880

Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to...

Open redirect

Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to...

CVE-2014-2880

Oracle Fusion Middleware’s Oracle Identity Manager (OIM) component contains an Open Redirect vulnerability (CVE-2014-2880) affecting 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. An attacker can abuse the backUrl parameter in a changepwd action to identity/faces/firstlogin to redirect users to arbi...

CVE-2014-2880

Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to...

April 2014 Oracle Critical Patch Update

Software maker and database management company Oracle yesterday released its quarterly Critical Patch Update. The release resolves more than 100 security vulnerabilities, many of which received high common vulnerability scoring system base scores and should be applied as soon as possible. Product...

CVE-2014-2452

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin...