PT-2014-2973

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 8.4.0 through 8.4.1 Description The issue affects the availability of the system, allowing context-dependent attackers to exploit it via unknown vectors related to Outside In Maintenance in the Oracle Outside ...

PT-2014-2956

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.6 through 11.1.2.1 Description The issue affects confidentiality, integrity, and availability. It is related to Security and Authentication, but the specific vectors are unknown. Recommendations For...

PT-2014-3617

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.6 through 11.1.1.7 Description The issue affects confidentiality and can be exploited by remote authenticated users through vectors related to the OID LDAP server in the Oracle Internet Directory...

CVE-2013-5879: Undefined Security Weakness

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance...

CVE-2014-0383: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0 and 11.1.2.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Identity Console...

PT-2014-3600

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 11.1.1.6 Description The issue affects the integrity of the system, related to Page Parameters and Events in the Oracle Portal component. Recommendations For Oracle Fusion Middleware version 11.1.1.6, consider...

CVE-2014-0400: Undefined Security Weakness

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to OID LDAP server...

PT-2014-3609

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.1 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to End User Self Service. Recommendations For versions 11.1.1.5...

CVE-2013-5901: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.2.0 and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to Identity Console...

CVE-2014-0391: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect confidentiality via unknown vectors related to End User Self Service...

CVE-2013-5808: Undefined Security Weakness

Unspecified vulnerability in the Oracle iPlanet Web Proxy Server component in Oracle Fusion Middleware 4.0 allows remote attackers to affect confidentiality via unknown vectors related to Administration...

CVE-2014-0374: Undefined Security Weakness

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6 allows remote attackers to affect integrity via unknown vectors related to Page Parameters and Events...

CVE-2013-5900: Undefined Security Weakness

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.0, and 11.1.2.1 allows remote attackers to affect integrity via unknown vectors related to End User Self Service...

CVE-2013-5869: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Page Service...

PT-2014-2990

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.1.5 through 11.1.2.1 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to End User Self Service in the Oracle Identity Manager...

PT-2014-2991

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.2.0 through 11.1.2.1 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Identity Console in the Oracle Identity Manager component...

PT-2014-3604

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 11.1.2.0 through 11.1.2.1 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Identity Console in the Oracle Identity Manager...

CVE-2013-5785: Undefined Security Weakness

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.6, 11.1.1.7, and 11.1.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security and Authentication...

Oracle Releases January 2014 Security Advisory

Oracle has released its Critical Patch Update for January 2014 to address 144 vulnerabilities across multiple products. This update contains the following security fixes: 5 for Oracle Database Server 22 for Oracle Fusion Middleware 2 for Oracle Hyperion 4 for Oracle E-Business Suite 16 for Oracle...

Oracle Fusion Middleware Web Services Component Remote Information Disclosure

The remote host is affected by an information disclosure vulnerability that is related to the 'ScriptServlet' class in the Web Services Test Page. This vulnerability can be triggered via a specially crafted query with a directory traversal string. C Tenable Network Security, Inc...