Design/Logic Flaw

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. Supported versions that are affected are 5.5.0.0.0, 5.9.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker wit...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Server. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Denial of service

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

Buffer overflow

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.5.0.0.0 and 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2022-21497

CVE-2022-21497 affects Oracle Web Services Manager (component: Web Services Security) within Oracle Fusion Middleware. Affects 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker who can reach the service over HTTP to compromise the product. Exploitation requires human...

CVE-2022-21492

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Server. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21453

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2022-21453

CVE-2022-21453 affects Oracle WebLogic Server (Console) and is addressed in the Oracle April 2022 CPU advisory. Affected versions: WebLogic 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. The vulnerability allows unauthenticated, network-access via HTTP access to compromised data; exploitation requires user ...

CVE-2022-21448

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21448

CVE-2022-21448 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (BI EE) Visual Analyzer component, specifically the 5.9.0.0.0 release. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise BI EE, with successful attacks ...

CVE-2022-21445

...

CVE-2022-21445

...

CVE-2022-21441

CVE-2022-21441 pertains to Oracle WebLogic Server (Fusion Middleware, Core). Affected are WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The flaw allows an unauthenticated, network-accessible attacker via T3/IIOP to cause the server to hang or crash (DoS). Root cause is described...

CVE-2022-21421

CVE-2022-21421 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (BI EE), specifically the Analytics Web General component. Affected versions include 5.5.0.0.0, 5.9.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability permits an unauthenticated, network-accessible ...

CVE-2022-21420

CVE-2022-21420 affects Oracle Coherence (Oracle Fusion Middleware, Core) with affected versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The vulnerability allows an unauthenticated remote attacker who can reach the service via T3 to compromise Coherence and may lead to takeover. The CVSS3.1 vector...

CVE-2022-21419

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Visual Analyzer. Supported versions that are affected are 5.5.0.0.0 and 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2022-21404

CVE-2022-21404 affects Oracle Fusion Middleware Helidon (Reactive WebServer). Affected versions are 1.4.10 and 2.0.0-RC1. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Helidon, potentially taking over the Helidon instance. CVSS v3.1 base score 8.1...

CVE-2022-21404

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Reactive WebServer. Supported versions that are affected are 1.4.10 and 2.0.0-RC1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...