CVE-2013-1553

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Services Security...

CVE-2013-1553

The CVE-2013-1553 entry concerns Oracle Fusion Middleware 11.1.1.6.0, specifically the Oracle Web Services Manager component. The vulnerability is described as unspecified and affecting confidentiality and integrity via unknown vectors related to Web Services Security. The provided connected docu...

CVE-2013-0416

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-2403...

CVE-2013-0416

Oracle Siebel CRM 8.1.1 and 8.2.2 have an unspecified vulnerability in the Siebel Enterprise Application Integration (EAI) Web Services, exploitable by remote authenticated users to affect confidentiality via unknown vectors per the NVD description. The impact is partial confidentiality; no other...

PT-2013-3232

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 11.1.1.6.0 Description The issue affects confidentiality and integrity, and it is related to Web Services Security in the Oracle Web Services Manager component. The exact vectors of the issue are not specified...

CVE-2013-2413: Undefined Security Weakness

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Web Services...

CVE-2013-2403: Undefined Security Weakness

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-0416...

PT-2013-2314

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and is related to Web Services in the Siebel Enterprise Application Integration component. It can be exploited by remote authenticated users via unkno...

PT-2013-3738

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 and 8.2.2 Description The issue affects the confidentiality of the system, related to Web Services in the Siebel Enterprise Application Integration component. It can be exploited by remote authenticated users v...

PT-2013-3748

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1 through 8.2.2 Description The issue affects confidentiality and integrity, allowing remote authenticated users to exploit it via unknown vectors related to Web Services. Recommendations For Oracle Siebel CRM...

CVE-2013-0416: Undefined Security Weakness

Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Services, a different vulnerability than CVE-2013-2403...

CVE-2013-1553: Undefined Security Weakness

Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 11.1.1.6.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Web Services Security...

apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

apache-cxf: SOAPAction spoofing on document literal web services

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body...

SA-CONTRIB-2013-042 - RESTful Web Services (RESTWS) - Denial of Service

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module interferes with Drupal's page cache and allows an attacker to poison the cache with non-HTML page responses, thereby exposing ...

apache-cxf: SOAPAction spoofing on document literal web services

Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action String that is inconsistent with the message body...

apache-cxf: Bypass of security constraints on WS endpoints when using WSS4JInInterceptor

The URIMappingInterceptor in Apache CXF before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2, when using the WSS4JInInterceptor, bypasses WS-Security processing, which allows remote attackers to obtain access to SOAP services via an HTTP GET request...

Portal Web Services CRLF Injection / XSS

Exploit Title: Portal Web Services Cms CRLF injection + Cross Site Scripting Vulnerability + Exploit Author: Ashiyane Digital Security Team + Home : www.Ashiyane.org + Vendor Homepage: www.portalwebservices.com + Tested on: Windows 7 + Dork: intext:"Powered By : Portal Web Services"...

Fedora Update for euca2ools FEDORA-2013-3437

Check for the Version of euca2ools OpenVAS Vulnerability Test Fedora Update for euca2ools FEDORA-2013-3437 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for euca2ools FEDORA-2013-3462

Check for the Version of euca2ools OpenVAS Vulnerability Test Fedora Update for euca2ools FEDORA-2013-3462 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...