PT-2018-16031

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.9.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Portal, resulting in unauthorized read access to a subset ...

CVE-2018-3101: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: Portlet Services. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle WebCenter (Fatwire) Improper Access Control

Exploit Title: Oracle WebCenter FatWire Content Server 7 - Improper Access Control Dork: inurl:Satellite?pagename Date: 2017-10-17 Exploit Author: Sebastian Cornejo Olave Vendor Homepage: http://oracle.com Version: 5.5.2 ,7.5 = CVE: CVE-2017-10033 Category: Webapps Tested on: Kali linux...

Oracle WebCenter (Fatwire) 7.x Cross Site Scripting

Application: Oracle WebCenter Sites FatWire Content Server Versions Affected: 7.x 11gR1 Vendor URL: http://oracle.com Bugs: Multiple XSS Oracle WebCenter Sites FatWire Content Server 7.x 11gR1 Sent: 18.12.2017 Reported: 18.12.2017 Date of Public Advisory: 14.04.2018 Reference: Oracle Security Not...

Oracle WebCenter Sites 11.1.1.8.012.2.1.x - Cross-Site Scripting

Oracle WebCenter Sites 11.1.1.8.012.2.1.x - Cross-Site Scripting Exploit Title: Multiple XSS Oracle WebCenter Sites FatWire Content Server 7.x 11gR1 Dork: inurl:Satellite?c Date: 18.12.201 Exploit Author: Richard Alviarez Vendor Homepage: http://oracle.com Version: 7.x 11gR1 CVE: CVE-2018-2791...

Oracle WebCenter Sites 11.1.1.8.0/12.2.1.x - Cross-Site Scripting Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Multiple XSS Oracle WebCenter Sites FatWire Content Server 7.x 11gR1 Dork: inurl:Satellite?c Date: 18.12.201 Exploit Author: Richard Alviarez Vendor Homepage: http://oracle.com Version: 7.x 11gR1 CVE: CVE-2018-2791 Category...

Oracle WebCenter FatWire Content Server < 7 - Improper Access Control

Exploit Title: Oracle WebCenter FatWire Content Server 7 - Improper Access Control Dork: inurl:Satellite?pagename Date: 2017-10-17 Exploit Author: Sebastian Cornejo Olave Vendor Homepage: http://oracle.com Version: 5.5.2 ,7.5 = CVE: CVE-2017-10033 Category: Webapps Tested on: Kali linux...

Oracle WebCenter Sites Remote Vulnerability (April 2018 CPU)

The version of Oracle WebCenter Sites running on the remote host is affected by an unspecified flaw in the Sites component formerly FatWire Content Server that allows an remote attacker to impact confidentiality and integrity. Note that this issue only applies to versions 11.1.1.8.0, 12.2.1.2.0,a...

CVE-2018-2828

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2791

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2828

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

PT-2018-15841

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 11.1.1.9.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction from ...

PT-2018-15808

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8.0, 12.2.1.2.0, 12.2.1.3.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a...

CVE-2018-2828: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2018-2791: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Oracle WebCenter Content Unspecified Vulnerability-01 (cpujan2018-3236628)

Oracle WebCenter Content is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle WebCenter Content Unspecified Vulnerability-02 (cpujan2018-3236628)

Oracle WebCenter Content is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle WebCenter Content Multiple Vulnerabilities (January 2018 CPU)

The version of Oracle WebCenter Content running on the remote host is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid107090; scriptversion"1.7";...

CVE-2018-2713

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware subcomponent: WebCenter Spaces Application. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...