9678 matches found
Buffer overflow
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...
CVE-2020-2966
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2020-2967
CVE-2020-2967 affects Oracle WebLogic Server (Oracle Fusion Middleware) – Web Services component. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. Exploitation via network protocols IIOP/T3 allows unauthenticated access, potentially resulting in unauthorized access t...
CVE-2020-2966
CVE-2020-2966 affects Oracle WebLogic Server Console in 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can compromise WebLogic Server; exploitation requires user interaction and can lead to unauthorized update/insert/delete and read acc...
CVE-2020-14723
Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware component: Web UIX. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Help...
CVE-2020-14723
Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware component: Web UIX. Supported versions that are affected are 11.1.1.9.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Help...
CVE-2020-14723
CVE-2020-14723 affects Oracle Help Technologies (Web UIX) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0 through 12.2.1.3.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Help Technologies, with human interaction required, potent...
CVE-2020-14696
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14696
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Layout Templates. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-14690
CVE-2020-14690 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Analytics Actions). Affects supported versions: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0. The vulnerability permits unauthenticated, network-based access via HTTP with user interaction required...
CVE-2020-14687
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle...
CVE-2020-14696
The CVE-2020-14696 vulnerability affects Oracle BI Publisher (Layout Templates) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An unauthenticated attacker with network access over HTTP can compromise BI Publisher, with possible unauthorized read, up...
CVE-2020-14690
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with...
CVE-2020-14652
CVE-2020-14652 affects Oracle WebLogic Server (Core component). Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. The vulnerability can be exploited remotely over HTTP by an unauthenticated attacker to achieve unauthorized update/insert/delete and read access to data ...
CVE-2020-14652
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14655
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...
CVE-2020-14655
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware component: SSL API. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracl...
CVE-2020-14655
CVE-2020-14655 affects Oracle Security Service (SSL API) in Oracle Fusion Middleware. Affects 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Vulnerability allows unauthenticated attackers over HTTPS to access/modify Oracle Security Service data with C:H I:L, per CVSSv3.1 base metrics (Network, high attac...
CVE-2020-14636
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2020-14638
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...