CVE-2024-21205: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: OSB Core Functionality. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus...

Vulnerabilities fixed in Oracle Fusion Middleware

Vulnerabilities have been fixed in Oracle Fusion Middleware. A malicious party can exploit the vulnerabilities exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS Remote code execution Administrator/Root privileges Access to sensitive dat...

Oracle WebLogic Server Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the jquery component of the Web Services of Oracle Weblogic Server. An unauthenticated, remote attacker can exploit this to gain unauthorized update, inser...

Oracle Service Bus Web Container DoS

The vulnerability of the Web Container sub-component of the Oracle Service Bus component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2576: Undefined Security Weakness

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2019-2013

Name of the Vulnerable Software and Affected Versions Oracle Service Bus versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0 Description The issue is related to inadequate access control in the Web Container subcomponent of Oracle Service Bus, part of Oracle Fusion Middleware. It allows an...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

Design/Logic Flaw

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10119: Undefined Security Weakness

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

PT-2017-11117

Name of the Vulnerable Software and Affected Versions Oracle Service Bus version 11.1.1.9.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Service Bus, requiring human interaction from a person other than the attacker. Successful attacks c...

Unspecified Vulnerability in Oracle Service Bus

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Oracle Service Bus is one of the components that supports the interaction between managed...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Console Design. Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...