CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Oracle WebCenter Sites Apache Xalan-Java Library Security Bypass (January 2016 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing a security patch from the January 2016 Critical Patch Update CPU. It is, therefore, affected by a security bypass vulnerability in the Apache Xalan-Java library due to a failure to properly restrict access to certain...

Oracle WebCenter Sites Multiple Vulnerabilities (October 2015 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing security patches from the October 2015 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the bundled SpringSource Spring Framework that allows a remote attacker to execu...

CVE-2015-4867

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880...

Oracle WebCenter Content Server Multiple Vulnerabilities (October 2015 CPU)

The version of Oracle WebCenter Content installed on the remote host is affected by multiple vulnerabilities due to multiple unspecified flaws in the Content Server component. A remote attacker can exploit these flaws to impact integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU)

Binary data oraclewebcenterportaljuly2015cpu.nbin...

Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation - Ver2 (CVE-2012-1710)

A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition. The vulnerability is due to insufficient validation of parameters used in a certain method in the Sssplt30 ActiveX control. A remote attacker can exploit this vulnerability by enticing a target user to op...

Oracle WebCenter Sites Multiple Vulnerabilities (April 2015 CPU)

The Oracle WebCenter Sites installed on the remote host is missing patches from the April 2015 CPU. It is, therefore, affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker,...

CVE-2015-0456

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

CVE-2015-0456

CVE-2015-0456 affects Oracle Fusion Middleware WebCenter Portal (11.1.1.8.0) in the Portlet Services subcomponent. The CNVD entry confirms a vulnerability that could allow a remote attacker to update, insert, or delete data, impacting data integrity. The NVD entry tracks an unspecified vulnerabil...

Oracle WebCenter Content Server Remote Security Vulnerability (January 2015 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by an unspecified remote security vulnerability in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unspecified Vulnerability in Oracle WebCenter Content Content Server Subcomponent (CNVD-2015-00586)

Oracle WebCenter Content helps organizations optimize user access to information through content management, eliminating content silos and updating documents, images and rich media files. A security vulnerability exists in Oracle WebCenter Content Content Server that could be exploited by remote...

CVE-2015-0376

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

Oracle WebCenter Portal Unspecified Remote Information Disclosure (July 2014 CPU)

Binary data oraclewebcenterportalcve20144211.nbin...

CVE-2014-4257

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.8.0 allows remote attackers to affect confidentiality via unknown vectors related to Portlet Services...

CVE-2014-4211

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.7 and 11.1.1.8 allows remote attackers to affect integrity via unknown vectors related to Portlet Services...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Oracle WebCenter Sites Satellite Server - HTTP Header Injection

No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20130417-2 ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite...

Oracle WebCenter Portal People Connection Subcomponent Unspecified Information Disclosure (April 2014 CPU)

Binary data oraclewebcenterportalcve20140450.nbin...

Oracle WebCenter Sites Default Credentials Check

Oracle WebCenter Sites formerly known as FatWire Content Server is running on the remote host, and Nessus was able to authenticate to it using a set of known default credentials. This allows a remote attacker to gain administrative access to sites running on the server. %NASLMINLEVEL 70300 C...