CVE-2018-3228

CVE-2018-3228 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Attack: unauthenticated remote attacker with network access via HTTP can trigger a hang or crash (DoS) and potentially read a subset ...

CVE-2018-3233

CVE-2018-3233 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Vulnerable in 8.5.3 and 8.5.4. An unauthenticated attacker with network access via HTTP can potentially cause a hang or crash (DOS) and unauthorized read access to data in Outside In Technolo...

CVE-2018-3215

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3147

CVE-2018-3147 affects the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware. Affected versions are 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle Outside In data; exploitation...

CVE-2018-3147

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3232

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3249

CVE-2018-3249 affects Oracle WebLogic Server 10.3.6.0 (WLS - Web Services). The description indicates an easily exploitable vulnerability via HTTP that can lead to unauthorized access to Oracle WebLogic Server data. Connected documents confirm related fixes were included in Oracle’s October 2018 ...

CVE-2018-3245

CVE-2018-3245 affects Oracle WebLogic Server (WLS Core Components). The connected documents identify a Java deserialization vulnerability that, when exploited, allows an unauthenticated attacker with network access via T3 to execute arbitrary code and potentially take over the server. Affects mul...

CVE-2018-3245

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3197

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3224

CVE-2018-3224 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Exploit path: unauthenticated, network access via HTTP; impact includes potentially hanging or crashing the Outside In runtime (DoS) ...

CVE-2018-3254

CVE-2018-3254 affects Oracle WebCenter Portal (WebCenter Spaces Application) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle WebCenter Portal data. The CV...

CVE-2018-3223

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3213

Oracle WebLogic Server vulnerability CVE-2018-3213 affects the Docker Images subcomponent of Oracle Fusion Middleware. The issue is exploitable via network access using T3 and can lead to unauthorized access to data or complete access to Oracle WebLogic Server data. Affected versions are those pr...

CVE-2018-3222

CVE-2018-3222 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware and is observed in IBM FileNet Content Manager use cases. Affected versions: Outside In Technology 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated, network-accessing attacker (via ...

CVE-2018-3231

CVE-2018-3231 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. The vulnerability impacts Oracle Outside In 8.5.3 and 8.5.4, allowing an unauthenticated network attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized read access when data flows i...

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3302

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-2902

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...