Buffer overflow

Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM...

Design/Logic Flaw

Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

Buffer overflow

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS...

CVE-2010-2370

CVE-2010-2370 affects Oracle Business Process Management within Oracle Fusion Middleware (versions 5.7 MP3, 6.0 MP5, 10.3 MP2). It is exposed over HTTP via the BPM Process Administrator and is listed with CVSS v2 base score 4.3 (Network, Medium complexity, no auth, partial impact to integrity). C...

CVE-2010-0835

Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-2375

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS...

CVE-2010-0835

CVE-2010-0835 affects Oracle Fusion Middleware Wireless component 10.1.2.3. The vulnerability is exploitable remotely via HTTP (Remote Exploit without Auth.: Yes) with a CVSS v2 base score of 4.3 (Network, Medium, Confidentiality: None, Integrity: Partial, Availability: None). Connected documents...

CVE-2010-2375

Oracle WebLogic Server Plug-in HTTP Injection (CVE-2010-2375) affects the WebLogic web-server plugins for Apache, Sun, and IIS; the vulnerability arises because the plugin fails to sanitize certain URL-encoded headers before forwarding requests to WebLogic, enabling unauthenticated remote attacke...

Design/Logic Flaw

Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2381...

CVE-2010-0081

Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2381...

CVE-2010-0081

CVE-2010-0081 affects Oracle Fusion Middleware Application Server Control (Fusion Middleware) components 10.1.2.3 and 10.1.4.0.1. The vulnerability allows remote authenticated users to impact integrity via unspecified vectors. The issue is listed in Oracle’s July 2010 Critical Patch Update with f...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855...

CVE-2010-0872

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0872

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0856

Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.2 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0855

Technical details about CVE-2010-0855 are not publicly available in the provided connected documents. The sources reference the vulnerability in generic terms and do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2010-0856

CVE-2010-0856 applies to Oracle Fusion Middleware Portal (10.1.2.3 and 10.1.4.2). The vulnerability affects availability via unknown vectors and is described as remote-attackable with partial availability impact. Connected sources confirm affected product/version and indicate Oracle CPU APR 2010 ...

Solaris 10 (sparc) : 128640-30 (deprecated)

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 9.2.4, 10.0.2, 10.3.5, 10.3.6 and 12.1.1. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful...