Oracle WebCenter Sites Multiple Vulnerabilities (April 2015 CPU)

The Oracle WebCenter Sites installed on the remote host is missing patches from the April 2015 CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker,...

CVE-2015-0456

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

CVE-2015-0456

CVE-2015-0456 affects Oracle Fusion Middleware WebCenter Portal (11.1.1.8.0) in the Portlet Services subcomponent. The CNVD entry confirms a vulnerability that could allow a remote attacker to update, insert, or delete data, impacting data integrity. The NVD entry tracks an unspecified vulnerabil...

Oracle WebCenter Content Server Remote Security Vulnerability (January 2015 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by an unspecified remote security vulnerability in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unspecified Vulnerability in Oracle WebCenter Content Content Server Subcomponent (CNVD-2015-00586)

Oracle WebCenter Content helps organizations optimize user access to information through content management, eliminating content silos and updating documents, images and rich media files. A security vulnerability exists in Oracle WebCenter Content Content Server that could be exploited by remote...

CVE-2015-0376

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

Oracle WebCenter Portal Unspecified Remote Information Disclosure (July 2014 CPU)

Binary data oraclewebcenterportalcve20144211.nbin...

CVE-2014-4257

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services...

CVE-2014-4211

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Oracle WebCenter Sites Satellite Server - HTTP Header Injection

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130417-2 ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite...

Oracle WebCenter Portal People Connection Subcomponent Unspecified Information Disclosure (April 2014 CPU)

Binary data oraclewebcenterportalcve20140450.nbin...

Oracle WebCenter Sites Default Credentials Check

Oracle WebCenter Sites formerly known as FatWire Content Server is running on the remote host, and Nessus was able to authenticate to it using a set of known default credentials. This allows a remote attacker to gain administrative access to sites running on the server. %NASLMINLEVEL 70300 C...

Oracle WebCenter Sites Detection

Binary data oraclewebcentersitesdetect.nbin...

Oracle WebCenter Portal Installation Detection

Binary data oraclewebcenterportalinstalled.nbin...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, 11.1.1.7.0, and 11.1.1.8.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Content Server...

CVE-2013-5813

Technical details about CVE-2013-5813 are not publicly available in the supplied documents. No specific affected versions, vulnerability vector, impact, or patch information is provided here. Monitor for Oracle CPU advisories and vendor notices for updates.

Oracle WebCenter Content (July 2013 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by multiple vulnerabilities in the Content Server, Site Studio, and Web Forms components. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Code Execution (CVE-2013-1559)

A remote code execution vulnerability exists in Oracle WebCenter Content...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Control Vulnerability

Added: 08/19/2013 CVE: CVE-2013-1559 BID: 59122 OSVDB: 92386 Background Oracle WebCenter Content is an open platform that allows users to create a vast range of content management applications. It consolidates unstructured content from across diverse systems so it can be centrally managed and the...