10753 matches found
CVE-2017-10033
CVE-2017-10033 affects Oracle WebCenter Sites (Support Tools subcomponent) in Oracle Fusion Middleware. Vulnerable versions are 11.1.1.8.0 and 12.2.1.2.0. The issue enables an unauthenticated attacker with access to the hosting infrastructure to perform unauthorized read, update, insert, or delet...
CVE-2017-10385
CVE-2017-10385 affects Oracle GlassFish Server’s Web Container in Oracle Fusion Middleware 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, with successful attacks requiring user interaction. This can lead to unauthorized...
CVE-2017-10334
CVE-2017-10334 affects Oracle WebLogic Server (Web Container) with affected versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows a low-privilege, network-accessible attacker over HTTP to read a subset of data. The available sources provide the impact and affected v...
CVE-2017-10154
The CVE-2017-10154 vulnerability affects Oracle Fusion Middleware’s Oracle Access Manager (Web Server Plugin) in version 11.1.2.3.0. The issue allows an unauthenticated, network-accessible attacker (via HTTP) to read a subset of data due to a flaw in the Web Server Plugin, with CVSSv3.0 base scor...
CVE-2017-10400
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2017-10336
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...
CVE-2017-10385
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10393
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10360
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-10400
CVE-2017-10400 affects Oracle GlassFish Server within Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). Affected version is 3.1.2. The vulnerability reportedly allows an unauthenticated, network-accessible attacker over HTTP to compromise GlassFish Server, with the...
CVE-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
CVE-2017-10385
Removed by vendor...
CVE-2017-10391
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...
CVE-2017-10026
CVE-2017-10026 affects the Oracle Fusion Middleware’s Oracle SOA Suite component (Fabric Layer), specifically the 11.1.1.7.0 version. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the SOA Suite. The description notes that attacks require human int...
CVE-2017-10369
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2017-10360
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2017-10336
CVE-2017-10336 affects Oracle WebLogic Server (Web Container) in Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially enabling unau...
CVE-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
CVE-2017-10055
Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware subcomponent: Admin Graphical User Interface. The supported version that is affected is 7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-10391
CVE-2017-10391 affects the Oracle GlassFish Server Administration subcomponent. Affects Oracle Fusion Middleware GlassFish Server versions 3.0.1 and 3.1.2. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read, update, insert, or delete data and may enable pa...