CVE-2019-2438

The CVE-2019-2438 entry concerns Oracle Fusion Middleware’s Oracle Web Cache component (ESI/Partial Page Caching). Affected version is 11.1.1.9.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Cache, with exploitation described as diffi...

CVE-2019-2477

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2458

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2395

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2019-2395

CVE-2019-2395 affects Oracle WebLogic Server (WLS – Web Services subcomponent) in Oracle Fusion Middleware, specifically the 10.3.6.0 release. The vulnerability is described as easily exploitable with network access via HTTP by a low-privilege attacker, potentially leading to unauthorized read ac...

CVE-2019-2472

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2414

CVE-2019-2414 affects Oracle Fusion Middleware's Oracle HTTP Server Web Listener. Affected version shown as 12.2.1.3 (NVD). A Nessus plugin references 12.1.2.3 in the January 2019 CPU. The vulnerability is exploitable by a low-privilege user with valid logon, potentially enabling takeover of the ...

CVE-2019-2461

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2414

Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware subcomponent: Web Listener. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to...

CVE-2019-2476

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2466

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2427

The CVE-2019-2427 entry pertains to Oracle WebCenter Portal within Oracle Fusion Middleware (WebCenter Spaces Application). Affected versions are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise the portal, with the potenti...

CVE-2019-2478

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2398

The connected records confirm CVE-2019-2398 affects Oracle WebLogic Server (Fusion Middleware), specifically the WLS - Deployment subcomponent, with affected versions 10.3.6.0, 12.1.3.0 and 12.2.1.3. The underlying issue is an easily exploitable vulnerability that allows a low-privileged attacker...

CVE-2019-2474

CVE-2019-2474 concerns the Oracle Outside In Technology component (Outside In Filters) in Oracle Fusion Middleware, with affected versions 8.5.3 and 8.5.4. The vulnerability enables an unauthenticated attacker with network access over HTTP to cause a hang or crash of Oracle Outside In Technology ...

CVE-2019-2458

CVE-2019-2458 affects IBM Rational DOORS Next Generation 6.0.6. A fix is available by upgrading to 6.0.6 iFix007 or later; for prior versions, upgrade to a fixed, supported version. No further exploit/vector details are provided in the connected documents.

CVE-2019-2475

The CVE-2019-2475 entry concerns Oracle Outside In Technology’s Outside In Filters in Oracle Fusion Middleware. IBM’s Security Bulletin ties this to IBM Rational DOORS Next Generation 6.0.6, listing the affected product/version and noting multiple related CVEs in the same Outside In Filters compo...

CVE-2019-2479

The connected IBM bulletin confirms CVE-2019-2479 relates to multiple vulnerabilities in Oracle Outside In Technology (Outside In Filters) used by IBM Rational DOORS Next Generation. Affected product: Rational DOORS Next Generation 6.0.6. The entry notes a specific issue set affecting Outside In ...

CVE-2019-2460

CVE-2019-2460 is documented in multiple sources as a vulnerability in Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The IBM Rational DOORS Next Generation bulletin explicitly lists CVE-2019-2460 among multiple Outside In-related flaws and names Rational DOORS...

CVE-2019-2469

CVE-2019-2469 is detailed in connected security records as affecting IBM Rational DOORS Next Generation (RDN) 6.0.6 via the Oracle Outside In Technology component (Outside In Filters). The vulnerability is described as unauthenticated, network-accessible, capable of causing a hang or crash (DoS) ...