Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2021 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities: - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware componen...

Oracle Fusion Middleware Input Validation Error Vulnerability (CNVD-2021-33844)

Oracle HTTP Server is the web server component of Oracle Fusion Middleware. A security vulnerability exists in the Web Listener component in Oracle HTTP Server versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit this vulnerability to compromise Oracle HTTP Server by allowin...

Vulnerabilities fixed in Oracle Fusion Middleware

Vulnerabilities have been fixed in Oracle Fusion Middleware. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware (CNVD-2021-30937)

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4. An attacker could exploit this vulnerability t...

Oracle Fusion Middleware Input Validation Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...

Unspecified Vulnerability in Oracle Enterprise Manager for Fusion Middleware

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...

Oracle Fusion Middleware Input Validation Error Vulnerability (CNVD-2021-33848)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...

Information Disclosure

flow-server is vulnerable to information disclosure. Non-constant-time comparison of CSRF tokens in endpoint request handler allows an attacker to discover a security token for Fusion endpoints via timing attack...

CVE-2021-31408

Authentication.logout helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 Vaadin 18, and 6.0.0 through 6.0.4 Vaadin 19.0.0 through 19.0.3 uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the...

Oracle Enterprise Manager for Fusion Middleware 安全漏洞

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 13.4.0.0. An attacker could exploit this vulnerability t...

Oracle Enterprise Manager for Fusion Middleware 安全漏洞

Oracle Enterprise Manager for Fusion Middleware is Oracle's on-premise management platform for Fusion Middleware. A security vulnerability exists in the FMW Control Plugin component in Oracle Enterprise Manager for Fusion Middleware version 12.2.1.4. An attacker could exploit this vulnerability t...

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...

Oracle Fusion Middleware 输入验证错误漏洞

Oracle HTTP Server is the web server component of Oracle Fusion Middleware. A security vulnerability exists in the Web Listener component in Oracle HTTP Server versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit this vulnerability to compromise Oracle HTTP Server by allowin...

Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19

Authentication.logout helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 Vaadin 18, and 6.0.0 through 6.0.4 Vaadin 19.0.0 through 19.0.3 uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the...

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. Oracle Fusion Middleware Oracle Platform Security for Java OPSS...

Oracle Fusion Middleware 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. Oracle Fusion Middleware Oracle Outside In Technology Outside In Filters...

GHSA-P7JQ-V8JP-J424 Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack....

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack....

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack....

Weak Password Vulnerability in Fusion Router FR3008

Ltd. was founded in 2009, is to provide users with intelligent products and cloud services in the field of smart home technology innovative enterprises Smart Life is Fusion's Internet strategy segment, with intelligent network devices, smart hardware, APP and Internet communication channels as th...