Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to WebLogic Tuxedo Connector...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6522

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

CVE-2014-6487

CVE-2014-6487 is an unspecified vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware versions 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. The flaw is described as allowing remote authenticated users to affect integrity via unknown vectors related to End User Self Ser...

CVE-2014-6552

Technical details for CVE-2014-6552 are not publicly available in the provided documents; monitor for updates as no affected product/version specifics or exploit information are disclosed here.

CVE-2014-6522

Oracle JDeveloper ADF Faces goButton XSS (CVE-2014-6522) is described in the October 2014 CPU plugin as an XSS vulnerability in the ADF Faces subcomponent caused by improper encoding of URLs used as targets for the goButton. An unauthenticated, remote attacker can exploit this to execute arbitrar...

CVE-2014-6554

Oracle Fusion Middleware's Oracle Access Manager Admin Console (11.1.2.1/11.1.2.2) is affected by an unspecified vulnerability (CVE-2014-6554) that could allow remote authenticated users to affect confidentiality and integrity via unknown vectors. The connected sources provide limited technical d...

CVE-2014-6553

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Admin Console...

CVE-2014-6487

Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect integrity via unknown vectors related to End User Self Service...

CVE-2014-6553

The CVE-2014-6553 entry concerns Oracle Fusion Middleware’s Oracle Access Manager (Admin Console) affected in versions 11.1.1.5 and 11.1.1.7. The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality and integrity via unknown vectors related to the Admin C...

CVE-2014-6552

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6534

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect integrity via vectors related to WLS Console...

CVE-2014-6534

CVE-2014-6534 affects Oracle WebLogic Server (Oracle Fusion Middleware) versions 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via vectors related to the WLS Console. The conn...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-6462

CVE-2014-6462 affects Oracle Access Manager in Oracle Fusion Middleware 11.1.2.1/11.1.2.2, with an unspecified vulnerability in the Admin Console that could affect integrity via unknown vectors. The available documents do not provide concrete exploit details or a confirmed remediation in this con...

CVE-2014-6462

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.1 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

Oracle MapViewer Multiple Vulnerabilities (July 2012 CPU)

According to its self-reported version number, the version of Oracle Fusion Middleware MapViewer installed on the remote host is affected by the following vulnerabilities : - There is an unspecified flaw related to the Oracle Maps subcomponent that allows a remote attacker to gain access to...

Oracle Fusion Middleware HTTP Server (July 2012 CPU)

According to its banner, the version of Oracle Fusion Middleware HTTP Server installed on the remote host is affected by an unspecified flaw in the User Administration Pages of the Enterprise Manager for Fusion Middleware component. A remote attacker can exploit this to impact the host's integrit...

Mac OS X VMWare Fusion Root Privilege Escalation

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X VMWare Fusion Root Privilege Escalation Exploit', 'Description' = %q This abuses the bug in bash environment...

Mac OS X VMWare Fusion Root Privilege Escalation Exploit

This abuses the bug in bash environment variables CVE-2014-6271 to get a suid binary inside of VMWare Fusion to launch our payload as root. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex...