Buffer overflow

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security...

Buffer overflow

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability via unknown vectors related to Admin Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system...

CVE-2014-2411

Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security...

CVE-2014-2417

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2415

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2416,...

CVE-2014-2424

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system...

CVE-2014-2425

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2014-2426

Technical details about CVE-2014-2426 are not publicly available in the provided documents; monitor for updates.

CVE-2014-2470

CVE-2014-2470 is described in IBM OpenPages with Application Server security bulletin as an unspecified vulnerability in Oracle WebLogic Server related to the WLS Security component, affecting IBM OpenPages with Application Server 6.0–7.0. The IBM advisory associates the vulnerability with CVE-20...

CVE-2014-2426

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability via unknown vectors related to Admin Console...

CVE-2014-2411

CVE-2014-2411 affects Oracle Identity Analytics (Oracle Fusion Middleware) 11.1.1.5 and Sun Role Manager 5.0. an unspecified vulnerability could be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors related to Security. The connected...

CVE-2014-2416

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2418

CVE-2014-2418 affects Oracle Data Quality and Profiling for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is an untrusted pointer dereference in the TSS12.DscTools.FileChooserDlg ActiveX control, enabling remote code execution when a user opens a malicious page. This CVE i...

CVE-2014-2415

CVE-2014-2415 pertains to Oracle Data Quality and Data Profiling for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is a dereferencing of arbitrary pointers in multiple ActiveX controls used by Data Quality tooling (examples cited in checkpoints: PostcardPreviewInt, FileCho...

CVE-2014-2452

Technical details about CVE-2014-2452 are not publicly provided in the connected documents. No explicit affected version, root cause, impact, or remediation is described here. Monitor for updates.

CVE-2014-2424

CVE-2014-2424 affects the Oracle Event Processing component of Oracle Fusion Middleware 11.1.1.7.0. The vulnerability resides in the FileUploadServlet, described as a directory traversal flaw that allows an arbitrary file upload, enabling a remote attacker to place files on the server. The CVE no...