PT-2010-3979

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410...

PT-2010-3980

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.2.3 Description The issue affects the integrity of the system, but details about the vectors used for exploitation are not specified. Recommendations For Oracle Fusion Middleware version 10.1.2.3, at the...

PT-2010-3993

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2410...

PT-2010-4865

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.2.3 through 11.1.1.2.0 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions 10.1.2.3, 10.1.4.3, and...

CVE-2010-2410: Undefined Security Weakness

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409...

PT-2010-3997

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.3.2 through 10.1.3.4.1 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. No information is available about the estimated number of...

CVE-2010-2396: Undefined Security Weakness

Unspecified vulnerability in the Forms component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-2395: Undefined Security Weakness

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2409 and CVE-2010-2410...

PT-2010-3974

Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 10.1.0.5 through 10.1.0.5 Oracle Database Server versions 10.2.0.3 through 10.2.0.3 Oracle Fusion Middleware versions 10.1.2.3 through 10.1.2.3 Oracle Fusion Middleware versions 10.1.4.3 through 10.1.4.3...

CVE-2010-2390: Undefined Security Weakness

Unspecified vulnerability in the Database Control component in EM Console in Oracle Database Server 10.1.0.5 and 10.2.0.3, Oracle Fusion Middleware 10.1.2.3 and 10.1.4.3, and Enterprise Manager Grid Control allows remote attackers to affect confidentiality, integrity, and availability via unknown...

CVE-2010-2413: Undefined Security Weakness

Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors...

Oracle Fusion Middleware 10.1.210.1.3 - BPEL Console Cross-Site Scripting

Oracle Fusion Middleware 10.1.210.1.3 - BPEL Console Cross-Site Scripting source: https://www.securityfocus.com/bid/43954/info Oracle Fusion Middleware is prone to a cross-site scripting vulnerability in BPEL Console. The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to...

Oracle Fusion Middleware 10.1.2/10.1.3 - BPEL Console Cross-Site Scripting

source: https://www.securityfocus.com/bid/43954/info Oracle Fusion Middleware is prone to a cross-site scripting vulnerability in BPEL Console. The vulnerability can be exploited over the 'HTTP' protocol. For an exploit to succeed, the attacker must have 'Valid Session' privileges. An attacker ma...

CVE-2010-2375

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS...

CVE-2010-0835

Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Wireless component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors...

Buffer overflow

Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM...

Buffer overflow

Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS...

Design/Logic Flaw

Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0081...

CVE-2010-2370

CVE-2010-2370 affects Oracle Business Process Management within Oracle Fusion Middleware (versions 5.7 MP3, 6.0 MP5, 10.3 MP2). It is exposed over HTTP via the BPM Process Administrator and is listed with CVSS v2 base score 4.3 (Network, Medium complexity, no auth, partial impact to integrity). C...