CVE-2019-2608

CVE-2019-2608 involves Oracle Outside In Technology (Outside In Filters) used by IBM Rational DOORS Next Generation and IBM FileNet Content Manager. Affected versions include Oracle Outside In Technology 8.5.3 and 8.5.4; vulnerability allows unauthenticated network access via HTTP to read, update...

CVE-2019-2601

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2019-2609

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2601

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2019-2609

CVE-2019-2609 is described as an Oracle Outside In Technology (Outside In Filters) vulnerability affecting Oracle Fusion Middleware, with affected versions 8.5.3 and 8.5.4. Connected IBM/Red Hat documents confirm real-world applicability in Oracle Outside In Technology used by IBM Rational DOORS ...

CVE-2019-2588

CVE-2019-2588 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware. The NUCLEI template confirms a path traversal vulnerability in BI Publisher Security affecting versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit a vulnerability in the BI Publisher ...

CVE-2019-2572

CVE-2019-2572 affects Oracle Fusion Middleware Oracle SOA Suite (Fabric Layer) with version 11.1.1.9.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker and can lead to unauthorized read access to a subset of SOA Suite data. Affected component/issue is documented...

CVE-2019-2578

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2578

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 (Advanced UI) is affected by CVE-2019-2578 due to broken access control. This could let an unauthenticated attacker with network access over HTTP gain unauthorized access to data across the WebCenter Sites instance. The CVSSv3 base score is 8.6 ...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2568

CVE-2019-2568 affects Oracle WebLogic Server (WLS Core Components) and is applicable to WebLogic versions 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The issue is a network-accessible vulnerability that allows a low-privilege, unauthenticated or low-privilege attacker with HTTP access to compromise th...

CVE-2019-2572

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

CVE-2019-2579

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 is affected by CVE-2019-2579, tied to a SQL injection vulnerability in the WebCenter Sites component (Advanced UI). The Nuclei template confirms a SQLi condition that is exploitable by a low-privileged attacker with network access over HTTP, pot...

CVE-2019-2572

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

CVE-2019-2578

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2576

The CVE-2019-2576 vulnerability affects Oracle Fusion Middleware’s Oracle Service Bus, Web Container subcomponent, with confirmed impact on versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0. The issue allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle Servic...

CVE-2019-2579

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2616

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

VMSA-2019-0006 : VMware ESXi, Workstation and Fusion updates address multiple out-of-bounds read vulnerabilities

a. VMware ESXi, Workstation and Fusion vertex shader out-of-bounds read vulnerability VMware ESXi, Workstation and Fusion updates address an out-of-bounds vulnerability with the vertex shader functionality. Exploitation of this issue requires an attacker to have access to a virtual machine with 3...

Oracle Squashes 53 Critical Bugs in April Security Update

Oracle is urging customers to patch critical vulnerabilities in its products as part of its massive April update, which fixes a whopping 297 flaws. Of those flaws, 53 vulnerabilities in Oracle products had a CVSS score of 9.0 or higher, making them “critical” severity – and in fact, 49 of those...