CVE-2018-3201

CVE-2018-3201 affects Oracle WebLogic Server (Fusion Middleware) specifically the WLS Core Components in version 12.2.1.3. The vulnerability allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially resulting in a takeover of the server (high/critica...

CVE-2018-3213

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Docker Images. The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3231

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3252

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3238

Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 is affected by a cross-site scripting vulnerability in the WebCenter Sites component (subcomponent: Advanced UI). The vulnerability, described as easily exploitable, could allow a high-privileged attacker with network access over HTTP to execute...

CVE-2018-3152

CVE-2018-3152 affects Oracle GlassFish Server 3.1.2 in the Administration component. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or complete denial-of-service of the GlassFish server. Documented impact is an availability loss (CVSSv3 base 7.5)...

CVE-2018-3219

CVE-2018-3219 involves Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The initial record specifies affected versions 8.5.3 and 8.5.4 with network-accessible, unauthenticated access requiring user interaction. Connected IBM and vendor pages confirm that multipl...

CVE-2018-3219

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3152

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server...

CVE-2018-3225

CVE-2018-3225 describes a vulnerability in the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The affected product scope in the provided docs centers on Rational DOORS Next Generation (and IBM FileNet/IBM IBM postings referencing Outside In) with the concrete ...

CVE-2018-3230

CVE-2018-3230 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The vulnerability affects Oracle Outside In Technology 8.5.3 and 8.5.4 and can allow an unauthenticated remote attacker with network access via HTTP to cause a hang or crash (DoS) and read a...

CVE-2018-3234

CVE-2018-3234 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware; IBM Rational DOORS Next Generation 6.0.6 and prior Rational DOORS releases using OIT 8.5.3/8.5.4 are affected. Reported impact is denial of service (hangs/crashes) and unauthorized data read when ...

CVE-2018-3223

CVE-2018-3223 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The vulnerability affects the 8.5.3 and 8.5.4 releases of Outside In Technology and can allow an unauthenticated attacker with network access via HTTP to cause a hang or crash (denial of ser...

CVE-2018-3220

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3224

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3224

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3219

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3302

CVE-2018-3302 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Impact is that version 8.5.3/8.5.4 may allow an unauthenticated, network-accessible attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized data read, with user interaction required....

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...