CVE-2013-3831

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos...

Stack overflow

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has...

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Portal component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Demos...

CVE-2013-3836

Unspecified vulnerability in the Oracle Web Cache component in Oracle Fusion Middleware 11.1.1.6 and 11.1.1.7 allows remote authenticated users to affect confidentiality via vectors related to ESI/Partial Page Caching...

CVE-2013-3828

CVE-2013-3828 affects Oracle Fusion Middleware Web Services (Oracle BPEL Process Manager ScriptServlet) versions 10.1.3.5.0 and 11.1.1.6.0. Multiple sources describe an information-disclosure vulnerability in the Web Services Test Page’s ScriptServlet, exploitable via a crafted request that trigg...

CVE-2013-3833

The CVE-2013-3833 entry concerns Oracle Fusion Middleware’s Oracle Access Manager (OAM) component, specifically versions 11.1.1.5.0 and 11.1.2.0.0. The vulnerability is described as an unspecified issue in the Authentication Engine that could allow remote attackers to affect integrity via unknown...

CVE-2013-3833

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 and 11.1.2.0.0 allows remote attackers to affect integrity via unknown vectors related to Authentication Engine...

CVE-2013-5773

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5.0 allows remote attackers to affect integrity via unknown vectors related to Servlet Runtime...

CVE-2013-3831

CVE-2013-3831 affects Oracle Portal (Demo Organization Chart) in Oracle Fusion Middleware 11.1.1.6.0. The vulnerability is an SQL injection in the Oracle Portal Demo Organization Chart app caused by inadequate sanitization of the p_args_values parameter, potentially enabling a remote authenticate...

CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

CVE-2013-3827

CVE-2013-3827 affects Oracle GlassFish Server components in Fusion Middleware 2.1.1, 3.0.1, 3.1.2; Oracle JDeveloper in 11.1.2.3.0, 11.1.2.4.0, 12.1.2.0.0; and Oracle WebLogic Server in Fusion Middleware 10.3.6.0 and 12.1.1. The vulnerability, related to JavaServer Faces/Web Container handling, a...

CVE-2013-5773

CVE-2013-5773 affects Oracle Containers for J2EE within Oracle Fusion Middleware 10.1.3.5.0, with an unspecified integrity impact via Servlet Runtime; the exact vectors are not detailed in the provided documents. One connected source notes an unspecified cross-site scripting issue in Oracle’s J2E...

CVE-2013-3827

Removed by vendor...

CVE-2013-5791

Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has...

CVE-2013-5791

CVE-2013-5791 is a stack-based buffer overflow in Oracle Outside In Technology’s Microsoft Access 1.x database file parser used by IBM Content Manager/Content Foundation and related IBM products. The vulnerability allows code execution or denial of service when processing crafted MDB files; IBM d...

CVE-2013-3836

CVE-2013-3836 affects Oracle Web Cache (Oracle Fusion Middleware 11.1.1.6/11.1.1.7). The vulnerability’s root cause is related to ESI/Partial Page Caching, allowing remote authenticated users to impact confidentiality. The connected documents confirm the affected product and vector but do not pro...

October 2013 Oracle Java Critical Patch Update

On Tuesday, for the first time, Java security updates were included with the quarterly Oracle Critical Patch Update – and just as quickly, Java wasted no time elevating itself as the top concern for Oracle admins and security experts. Of the 51 Java patches released, 50 allow for remote code...

Oracle Releases October 2013 Security Advisory

Oracle has released its Critical Patch Update for October 2013 to address 127 vulnerabilities across multiple products. This update contains the following security fixes: 2 for Oracle Database Server 17 for Oracle Fusion Middleware 4 for Oracle Enterprise Manager Grid Control 1 for Oracle...

Fedora 19 : python-keystoneclient-0.2.3-7.fc19 (2013-14302)

Selective backports from stable/grizzly : - Ec2Signer: Initial support for v4 signature verification. - Allow signature verification for older boto versions. - Default signingdir to secure temp dir. - Fix memcache encryption middleware. CVE-2013-2166, CVE-2013-2167 - Check token expiry...