CVE-2018-3098

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3103

CVE-2018-3103 affects the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected version: Outside In Technology 8.5.3; vulnerability allows an unauthenticated attacker with network access via HTTP to access data and potentially cause partial DOS. IBM/Oracle a...

CVE-2018-3105

CVE-2018-3105 affects Oracle Fusion Middleware/SOA Suite (Health Care FastPath). Affected products/versions: Oracle SOA Suite in 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0. The issue is exploitable by a low-privileged attacker over HTTP with network access, leading to unauthorized...

CVE-2018-3007

CVE-2018-3007 concerns Oracle Fusion Middleware’s Oracle Tuxedo Core. The vulnerability affects Tuxedo versions 12.1.1, 12.1.3, and 12.2.2, and can be exploited by an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. The impact is high severity, with potential una...

CVE-2018-3007

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the...

CVE-2018-2958

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3097

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3010

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2925

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise ...

CVE-2018-2998

CVE-2018-2998 affects Oracle WebLogic Server (SAML subcomponent) in Oracle Fusion Middleware. Affects supported versions: 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3. An attacker with network access over HTTP and low privileges can potentially perform unauthorized updates/inserts/deletes and read acce...

CVE-2018-2943

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware subcomponent: Map Builder. Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2893

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2018-3092

CVE-2018-3092 refers to a vulnerability in Oracle Outside In Technology (Outside In Filters) version 8.5.3. Connected sources confirm affected products include IBM Rational DOORS Next Generation (6.0.6) and IBM FileNet Content Manager (5.2.1, 5.5.0, 5.5.1). The issue allows an unauthenticated att...

CVE-2018-3102

CVE-2018-3102 concerns Oracle Outside In Technology's Outside In Filters in Oracle Fusion Middleware (affected: Outside In Technology, 8.5.3). The vulnerability is exploitable over network via HTTP by an unauthenticated attacker and requires human interaction, potentially leading to unauthorized ...

CVE-2018-3009

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3101

Affected product: Oracle WebCenter Portal, a component of Oracle Fusion Middleware (subcomponent: Portlet Services). Affected versions: 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Impact: unauthenticated, network-accessible via HTTP attacker can read a subset of data in WebCenter Portal (CVSSv3 base s...

CVE-2018-2935

CVE-2018-2935 is the Oracle WebLogic Server JSF vulnerability affecting 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. The issue allows an unauthenticated, network-accessible attacker via HTTP to compromise WebLogic Server, with human interaction required for exploitation (UI: REQUIRED). The impact i...

CVE-2018-2893

The CVE-2018-2893 entry concerns Oracle WebLogic Server (WLS Core Components) with affected versions 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3. The vulnerability allows unauthenticated remote takeover via the T3 protocol, as described in the initial document, and is connected to multiple PoCs/exploi...

CVE-2018-3007

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the...

CVE-2018-3102

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...