Oracle WebCenter Forms Recognition SSSplitter ActiveX Overwrite

Added: 05/02/2012 CVE: CVE-2012-1710 BID: 53062 OSVDB: 81366 Background Oracle WebCenter Imaging is a combined document management and business process management suite, marketed as a component of the Oracle Fusion Middleware portfolio of products. Oracle Forms Recognition OFR is an intelligent...

Oracle WebCenter Forms Recognition SSSplitter ActiveX Overwrite

Added: 05/02/2012 CVE: CVE-2012-1710 BID: 53062 OSVDB: 81366 Background Oracle WebCenter Imaging is a combined document management and business process management suite, marketed as a component of the Oracle Fusion Middleware portfolio of products. Oracle Forms Recognition OFR is an intelligent...

Oracle Forms Recognition CroScPlt.dll ActiveX Control Remote Code Execution Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebCenter Forms Recognition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Oracle WebCenter Forms Recognition Sssplt30.ocx ActiveX Control Remote Code Execution Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebCenter Forms Recognition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Oracle WebCenter Content Default Administration Credentials

Nessus was able to login to Oracle WebCenter Content using a default set of administrative credentials. A remote attacker could utilize these credentials to view and delete protected content or change the content server configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebCenter Content 'GET_SEARCH_RESULTS' SQL Injection

The Oracle WebCenter Content install on the remote host does not properly sanitize the 'SortField', 'SortOrder', and 'QueryText' parameters of the 'GETSEARCHRESULTS' IDC service. An attacker can exploit this flaw to launch SQL injection attacks which could lead to authentication bypass, disclosur...

Oracle WebCenter Content Detection

Oracle WebCenter Content formerly known as Enterprise Content Management, a web-based content management system, is running on the remote host. Note that for accurate results, you may need to enable the Oracle WebCenter Content port by default 16200 in your Nessus scan. C Tenable Network Security...

Oracle WebCenter Content Help Component XSS

Oracle WebCenter Content is susceptible to multiple reflected cross- site scripting attacks in the help component including 'frameset.htm', 'api.htm', 'switch.js', and 'wwhsec.htm'. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject...

CVE-2012-0083

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

CVE-2012-0085

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2012-0083

CVE-2012-0083 affects Oracle WebCenter Content (Oracle Fusion Middleware) and is evidenced by a Nessus plugin describing an SQL injection in the GET_SEARCH_RESULTS IDC service. The flaw arises because SortField, SortOrder, and QueryText parameters are not properly sanitized, enabling attacker-con...

CVE-2012-0083

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

CVE-2012-0085

CVE-2012-0085 refers to an unspecified vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 (Content Server). Connected CVE-related data provide concrete detail: a Nessus plugin (plugin 57979) describes Oracle WebCenter Content Help Component XS...

CVE-2012-0084

CVE-2012-0084 concerns an unspecified vulnerability in Oracle WebCenter Content within Oracle Fusion Middleware versions 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as allowing remote authenticated users to affect integrity via unknown vectors related to Co...

CVE-2012-0085

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server...