CVE-2018-3201

CVE-2018-3201 affects Oracle WebLogic Server (Fusion Middleware) specifically the WLS Core Components in version 12.2.1.3. The vulnerability allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially resulting in a takeover of the server (high/critica...

CVE-2018-3179

CVE-2018-3179 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager, poten...

CVE-2018-3204

CVE-2018-3204 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition Analytics Server (subcomponent) in the 12.2.1.3.0 release. An unauthenticated attacker with network access over HTTP can compromise data; user interaction is required. CVSS v3.0 base score is 8.2 (High). The vulnerabili...

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3224

CVE-2018-3224 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Exploit path: unauthenticated, network access via HTTP; impact includes potentially hanging or crashing the Outside In runtime (DoS) ...

CVE-2018-3234

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3238

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2018-2902

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2018-3218

CVE-2018-3218 concerns Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware. The documented affected product/version in the provided data is Rational DOORS Next Generation 6.0.6, with IBM remediation indicating a fixed patch: upgrade to Rational DOORS Next Generation 6.0....

CVE-2018-3213

Oracle WebLogic Server vulnerability CVE-2018-3213 affects the Docker Images subcomponent of Oracle Fusion Middleware. The issue is exploitable via network access using T3 and can lead to unauthorized access to data or complete access to Oracle WebLogic Server data. Affected versions are those pr...

CVE-2018-3231

CVE-2018-3231 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. The vulnerability impacts Oracle Outside In 8.5.3 and 8.5.4, allowing an unauthenticated network attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized read access when data flows i...

CVE-2018-3232

The CVE-2018-3232 vulnerability lies in Oracle Outside In Technology’s Outside In Filters (Oracle Fusion Middleware). Affected are Outside In Technology 8.5.3 and 8.5.4. An unauthenticated attacker with network access over HTTP can cause a hang/crash (DOS) and read a subset of data, with human in...

CVE-2018-3302

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3218

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3218

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3253

The CVE-2018-3253 entry concerns Oracle Fusion Middleware’s Oracle Virtual Directory component (Virtual Directory Manager). Affected are 11.1.1.7.0 and 11.1.1.9.0. The vulnerability is described as exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauth...

CVE-2018-3222

CVE-2018-3222 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware and is observed in IBM FileNet Content Manager use cases. Affected versions: Outside In Technology 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated, network-accessing attacker (via ...

CVE-2018-3210

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server...

CVE-2018-3228

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3215

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...