CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3502: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

PT-2016-5522

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8 through 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote authenticated users via unknown vectors. Recommendations For versions 11.1.1.8...

CVE-2016-3487: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

PT-2016-5508

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8, 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. Details about the vectors used for the attack are not specified. Recommendations For versions 11.1.1.8 and 12.2.1.0,...

Oracle WebCenter Sites Apache Xalan-Java Library Security Bypass (January 2016 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing a security patch from the January 2016 Critical Patch Update CPU. It is, therefore, affected by a security bypass vulnerability in the Apache Xalan-Java library due to a failure to properly restrict access to certain...

Oracle WebCenter Sites Multiple Vulnerabilities (October 2015 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing security patches from the October 2015 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the bundled SpringSource Spring Framework that allows a remote attacker to execu...

CVE-2015-4867

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880...

PT-2015-2560

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 7.6.2, 11.1.1.6.1, 11.1.1.8.0 Description The issue is related to errors in the code of the Oracle WebCenter Sites component in Oracle Fusion Middleware, allowing remote attackers to affect data integrity. The...

CVE-2015-4799: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.1, and 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Security...

CVE-2015-4880: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4867...

PT-2015-2506

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5.1 Description The issue is related to errors in the code of the Oracle WebCenter Content component in Oracle Fusion Middleware, allowing remote attackers to affect data integrity. The exploitation of...

CVE-2015-4867: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880...

Oracle WebCenter Content Server Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle WebCenter Content installed on the remote host is affected by multiple vulnerabilities due to multiple unspecified flaws in the Content Server component. A remote attacker can exploit these flaws to impact integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU)

Binary data oraclewebcenterportaljuly2015cpu.nbin...

PT-2015-1812

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Portal versions 11.1.1.8.0 through 11.1.1.9.0 Oracle Applications Framework versions 12.2.3 through 12.2.4 Description The issue is related to errors in the code of the Oracle WebCenter Portal component in Oracle Fusion...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Oracle WebCenter Sites Multiple Vulnerabilities (April 2015 CPU)

The Oracle WebCenter Sites installed on the remote host is missing patches from the April 2015 CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker,...

CVE-2015-0456

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

CVE-2015-0456

CVE-2015-0456 affects Oracle Fusion Middleware WebCenter Portal (11.1.1.8.0) in the Portlet Services subcomponent. The CNVD entry confirms a vulnerability that could allow a remote attacker to update, insert, or delete data, impacting data integrity. The NVD entry tracks an unspecified vulnerabil...