CVE-2024-21182

CVE-2024-21182 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware for versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability can be exploited by an unauthenticated attacker with network access via T3 or IIOP to compromise the server, potentially leading to unauthorized access to cri...

CVE-2024-21133

CVE-2024-21133 affects Oracle Reports Developer (Servlet) in Oracle Fusion Middleware. The root cause is insufficient input validation in the Servlet component, impacting versions 12.2.1.4.0 through 12.2.1.19.0. An unauthenticated attacker with network access via HTTP can cause unauthorized read,...

Oracle Identity Manager (Apr 2024 CPU)

The 12.2.1.4.0 versions of Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory. - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Third Party Quartz. The supported version...

Oracle Coherence (April 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of Coherence installed on the remote host are affected by a vulnerability as referenced in the April 2024 CPU advisory: - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Third Party Apache Mina SSHD. Supported versions th...

Oracle WebCenter Portal (April 2024 CPU)

The 12.2.1.4.0 versions of WebCenter Portal installed on the remote host are affected by a vulnerability as referenced in the April 2024 CPU advisory. - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Content integration. The supported version that is...

Oracle HTTP Server (April 2024 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2024 CPU advisory: - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Plugins BSAFE Crypto-J. Supported versions that are affected are...

CVE-2024-21120

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21118

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Core. Supported versions that are affected are 8.5.6 and 8.5.7. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Outside In...

CVE-2024-21006

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-20991

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful...

CVE-2024-20991

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful...

CVE-2024-21118

CVE-2024-21118 affects Oracle Outside In Technology (Outside In Core) in Oracle Fusion Middleware. Affected are Oracle Outside In Technology versions 8.5.6 and 8.5.7. The root cause is insufficient input validation in Outside In Core, enabling a local, low-privileged attacker with logon to the in...

CVE-2024-21120

CVE-2024-21120 affects Oracle Outside In Technology (Outside In Core) used in Oracle Fusion Middleware. Connected sources confirm affected versions 8.5.6–8.5.7 and a local, low-privilege attacker can log on to exploit and achieve unauthorized update/insert/delete, read access to data, and partial...

CVE-2024-21006

CVE-2024-21006 affects Oracle WebLogic Server (Core) in 12.2.1.4.0 and 14.1.1.0.0. The connected PoC demonstrates unauthenticated remote code execution via IIOP/JNDI (T3/IIOP access) leading to arbitrary code execution and data compromise. Oracle’s April 2024 CPU provides fixes (update to version...

CVE-2024-20992

The CVE-2024-20992 issue affects Oracle WebCenter Portal (Oracle Fusion Middleware), specifically the 12.2.1.4.0 version, and is due to insufficient protection of internal data in the Content integration component. An attacker with network access via HTTP and low privileges, requiring user intera...

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle WebCenter Portal for Oracle...

Oracle Fusion Middleware 的 Oracle WebLogic Server 安全漏洞

Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic Server is an application...

Oracle Fusion Middleware 的 Oracle WebLogic Server 安全漏洞

Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic Server is an application...

Oracle Fusion Middleware 的 Oracle Outside In Technology 安全漏洞

Oracle Fusion Middleware and Oracle Outside In Technology are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more. Oracle Outside In Technology is a...

CVE-2024-20986

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...