CVE-2017-10141

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside I...

CVE-2017-10059

CVE-2017-10059 affects Oracle Fusion Middleware BI Publisher (Mobile Service) with version 11.1.1.7.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, requiring user interaction, and can lead to unauthorized data access and possible un...

CVE-2017-10048

CVE-2017-10048 affects Oracle Fusion Middleware’s Oracle Enterprise Repository Web Interface, with affected versions 11.1.1.7.0 and 12.1.3.0.0. The vulnerability enables unauthenticated network access via HTTP to compromise Oracle Enterprise Repository, potentially granting unauthorized read/writ...

CVE-2017-10035

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successfu...

CVE-2017-10040

Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware is affected by CVE-2017-10040 in versions 11.1.1.9.0 and 12.2.1.1.0. The vulnerability enables unauthenticated network access via HTTP with required user interaction, potentially allowing unauthorized creation, deletion or ...

CVE-2017-10075

Oracle WebCenter Content (Content Server) versions 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0 are susceptible to Cross-Site Scripting (XSS). The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to cause the browser of visiting users to execute HTML/JavaScript, potentiall...

CVE-2017-10137

CVE-2017-10137 affects Oracle WebLogic Server (Oracle Fusion Middleware), subcomponent JNDI . Affected versions are 10.3.6.0 and 12.1.3.0 . The vulnerability is described as easily exploitable with an unauthenticated attacker who can reach the server over HTTP , potentially leading to takeover of...

CVE-2017-10156

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10059

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Mobile Service. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10025

CVE-2017-10025 affects Oracle Fusion Middleware BI Publisher, specifically the BI Publisher Security component in 11.1.1.7.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, potentially yielding unauthorized access to critical data or data wit...

CVE-2017-10178

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10156

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10058

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Administration. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker...

CVE-2017-10141

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside I...

CVE-2017-10028

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10063

The CVE-2017-10063 entry affects Oracle WebLogic Server (Web Services subcomponent) in Oracle Fusion Middleware. Affected versions are 10.3.6.0, 12.1.3.0, 12.2.1.1, and 12.2.1.2. It is described as difficult to exploit but allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2017-10196

CVE-2017-10196 is a vulnerability in the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware. Affected version is 8.5.3.0. An unauthenticated attacker with network access via HTTP can cause the Oracle Outside In Technology to hang or crash (complete DOS) a...

CVE-2017-10058

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Administration. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker...

CVE-2017-10075

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10137

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JNDI. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...