CVE-2019-2889

CVE-2019-2889 affects Oracle WebLogic Server 12.2.1.3.0 (component: Sample apps). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized update/insert/delete and unauthorized read access to WebLogic data. Thi...

CVE-2019-2887

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2019-2887

CVE-2019-2887 affects Oracle WebLogic Server (Web Services component) across 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows a low-privileged, network-authenticated attacker to access the server via HTTP and obtain unauthorized read access to a subset of WebLogic data. The issue ...

CVE-2019-2897

Technical details about CVE-2019-2897 are not provided in the connected documents. The available Initial Description lists affected product versions and impact, but no specifics on exploitation, vectors, or fixes in the supplied materials. Monitor for updates.

CVE-2019-2898

Vulnerability in the BI Publisher formerly XML Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2019-2904

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2886

Vulnerability in the Oracle Forms product of Oracle Fusion Middleware component: Services. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Forms. Successful attacks require hum...

CVE-2019-2903

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2897

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2019-2899

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: OAM. Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...

CVE-2019-2899

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: OAM. Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...

CVE-2019-2889

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2019-2897

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2019-2891

CVE-2019-2891 affects the Oracle WebLogic Server Console. Affects: Oracle WebLogic Server (Fusion Middleware) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause: a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentiall...

CVE-2019-2901

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2888

CVE-2019-2888 — Oracle WebLogic Server (EJB Container) Affected product/versions: Oracle WebLogic Server (Oracle Fusion Middleware), specifically EJB Container in versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause/impact: An unauthenticated, network-accessible attacker can exploit via HT...

CVE-2019-2890

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...

CVE-2019-2902

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2888

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2904

CVE-2019-2904 is an insecure deserialization vulnerability in Oracle JDeveloper/ADF Faces (Oracle Fusion Middleware). Affected: JDeveloper/ADF Faces components within Fusion Middleware, specifically the ADF Faces runtime used by Oracle JDeveloper and ADF. Affected versions listed include 11.1.1.9...