Oracle WebCenter Content Help Component XSS

Oracle WebCenter Content is susceptible to multiple reflected cross- site scripting attacks in the help component including 'frameset.htm', 'api.htm', 'switch.js', and 'wwhsec.htm'. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this to inject...

Oracle WebCenter Content Default Administration Credentials

Nessus was able to login to Oracle WebCenter Content using a default set of administrative credentials. A remote attacker could utilize these credentials to view and delete protected content or change the content server configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebCenter Content 'GET_SEARCH_RESULTS' SQL Injection

The Oracle WebCenter Content install on the remote host does not properly sanitize the 'SortField', 'SortOrder', and 'QueryText' parameters of the 'GETSEARCHRESULTS' IDC service. An attacker can exploit this flaw to launch SQL injection attacks which could lead to authentication bypass, disclosur...

Oracle WebCenter Content Detection

Oracle WebCenter Content formerly known as Enterprise Content Management, a web-based content management system, is running on the remote host. Note that for accurate results, you may need to enable the Oracle WebCenter Content port by default 16200 in your Nessus scan. C Tenable Network Security...

CVE-2012-0083

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

CVE-2012-0085

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2012-0085

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server...

CVE-2012-0083

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Search...

CVE-2012-0085

CVE-2012-0085 refers to an unspecified vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware 7.5.2 and 10.1.3.5.1 (Content Server). Connected CVE-related data provide concrete detail: a Nessus plugin (plugin 57979) describes Oracle WebCenter Content Help Component XS...

CVE-2012-0083

CVE-2012-0083 affects Oracle WebCenter Content (Oracle Fusion Middleware) and is evidenced by a Nessus plugin describing an SQL injection in the GET_SEARCH_RESULTS IDC service. The flaw arises because SortField, SortOrder, and QueryText parameters are not properly sanitized, enabling attacker-con...

CVE-2012-0084

CVE-2012-0084 concerns an unspecified vulnerability in Oracle WebCenter Content within Oracle Fusion Middleware versions 7.5.2, 10.1.3.5.1, 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as allowing remote authenticated users to affect integrity via unknown vectors related to Co...