PT-2013-3725

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2, 10.3.5, 10.3.6, and 12.1.1 Description The issue affects the integrity of the system, related to the WebLogic Console in Oracle WebLogic Server. The exact nature of the vulnerability and the vectors used...

PT-2013-3186

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2, 10.3.5, 10.3.6, and 12.1.1 Description The issue affects the integrity of the system, related to the WebLogic Console in Oracle WebLogic Server. The exact nature of the vulnerability and the vectors used...

Oracle Business Transaction Management Server FlashTunnelService Remote File Deletion

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version files tested:...

Oracle WebLogic Server vulnerable to cross-site scripting

Overview Oracle WebLogic Server contains a cross-site scripting vulnerability. Oracle WebLogic Server contains a cross-site scripting vulnerability on the management console. Minetoshi Takizawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#54779201: Oracle WebLogic Server vulnerable to cross-site scripting

Oracle WebLogic Server contains a cross-site scripting vulnerability on the management console. Impact An arbitrary script may be executed on the browser of the user who is logged into the administration console of Oracle WebLogic Server. Solution Update the Software Apply the latest update...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

PT-2012-2281

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4, 10.0.2, 10.3.3, 10.3.4, 10.3.5 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it. It is related to the WLS-Console component. Recommendations For...

CVE-2011-3566: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container...

PT-2012-1719

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4, 10.0.2, 10.3.3, 10.3.4, 10.3.5 Description The issue affects the availability of the system, allowing remote attackers to exploit it via unknown vectors related to the Web Container. Recommendations For...

Oracle WebLogic Portal Elevation of Privilege (CVE-2008-5462)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege elevation vulnerability in the portal component that could be exploited remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebLogic Server Web Services Security Policy not Enforced (CVE-2008-5459)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability that could allow a remote, unauthenticated attacker to disable enforcement of security policies for the web services. Such an attack could have a...

Oracle WebLogic Server Unspecified Information Disclosure (CVE-2008-2578)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified, local information disclosure vulnerability in the WebLogic console or server log. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebLogic JSP Pages Unspecified Information Disclosure (CVE-2008-2580)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified information disclosure vulnerability in JSP pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Oracle WebLogic WLS Unspecified Vulnerability (CVE-2008-5461)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host has an unspecified vulnerability in WebLogic Console that can be exploited remotely and may allow information disclosure and elevation of privileges. %NASLMINLEVEL 70300 C Tenable Network...

Oracle WebLogic UDDI Explorer Unspecified Vulnerability (CVE-2008-2581)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability in the UDDI Explorer component that could be exploited remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

PT-2011-3770

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and is related to WLS Security, allowing local users to exploit it. Recommendations For versions 9.2.4.0 through 10.3.5.0, at the moment,...

PT-2011-3772

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services in the Oracle WebLogic Server component of Oracle Fusio...

CVE-2011-2319: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...