CVE-2013-3770: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from th...

CVE-2013-1559

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

DSquare Exploit Pack: D2SEC_COAO

Name| d2seccoao ---|--- CVE| CVE-2013-1559 Exploit Pack| D2ExploitPack Description| Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Remote Code Execution Vulnerability Notes|...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

CVE-2013-1559

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

CVE-2012-4303

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

PT-2013-3238

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 through 11.1.1.6.0 Description The issue allows remote authenticated users to affect availability via unknown vectors related to Content Server. It is also related to a remote code execution...

CVE-2012-4303: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

CVE-2013-1503: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

PT-2013-3185

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 through 11.1.1.6.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Content Server. Recommendations For...

CVE-2013-1522: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

CVE-2013-1559: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

PT-2013-3204

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 and 11.1.1.6.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Content Server. Recommendations For version 10.1.3.5....

PT-2013-1665

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 11.1.1.6.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Content Server. Recommendations For Oracle WebCenter Content version...

Oracle WebCenter Content Default Administration Credentials

Nessus was able to login to Oracle WebCenter Content using a default set of administrative credentials. A remote attacker could utilize these credentials to view and delete protected content or change the content server configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebCenter Content Detection

Oracle WebCenter Content formerly known as Enterprise Content Management, a web-based content management system, is running on the remote host. Note that for accurate results, you may need to enable the Oracle WebCenter Content port by default 16200 in your Nessus scan. C Tenable Network Security...

Oracle WebCenter Content 'GET_SEARCH_RESULTS' SQL Injection

The Oracle WebCenter Content install on the remote host does not properly sanitize the 'SortField', 'SortOrder', and 'QueryText' parameters of the 'GETSEARCHRESULTS' IDC service. An attacker can exploit this flaw to launch SQL injection attacks which could lead to authentication bypass, disclosur...

CVE-2012-0083

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

CVE-2012-0084: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...