CVE-2013-1503

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2012-4303

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites...

CVE-2013-1529

Public details for CVE-2013-1529 are not provided in the supplied documents. They reference Oracle WebCenter Interaction components but give no concrete exploit, impact, or remediation. Monitor for updates.

CVE-2013-1522

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 contains CVE-2013-1522, an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Affected products/versions are cited by NVD; CVSSv2 base score 4.3 (MEDIUM) wi...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1559

CVE-2013-1559 affects Oracle WebCenter Content Content Server. Public records show a remote authenticated vulnerability in the CheckOutAndOpen.dll ActiveX control that can lead to remote code execution, with confirmed testing/exploitation against Oracle WebCenter Content 11.1.1.6.0 (and earlier 1...

CVE-2013-1559

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

CVE-2013-1516

CVE-2013-1516 concerns a buffer overflow in the BlackIceDevMode.ocx ActiveX control used by Oracle WebCenter Capture (formerly Oracle Document Capture). The Import Server subcomponent is affected, allowing command execution when a user loads a malicious page that calls SetAnnotationFont. Exploita...

CVE-2013-1503

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2013-1503

CVE-2013-1503 affects Oracle WebCenter Content’s Content Server component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via unknown vectors related to Content Server. Connected document...

CVE-2012-4303

Technical details for CVE-2012-4303 are not publicly provided in the connected documents. The available sources only describe an unspecified vulnerability in Oracle WebCenter Content with limited context. Monitor for updates from official advisories; avoid speculation.

CVE-2012-4303

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

CVE-2013-1509

Oracle WebCenter Sites Satellite Server (former FatWire Satellite Server) is affected by CVE-2013-1509 through HTTP header injection that can lead to cache poisoning and manipulation of HTTP response headers (e.g., Set-Cookie, Refresh). Affected versions include FatWire Satellite Server 7.6.0 Pat...

Oracle WebCenter / Fatwire Header Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Server vulnerab...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

This module exploits a vulnerability found in the Oracle WebCenter Content CheckOutAndOpenControl ActiveX. This vulnerability exists in openWebdav, where user controlled input is used to call ShellExecuteExW. This module abuses the control to execute an arbitrary HTA from a remote location. This...

SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server)

SEC Consult Vulnerability Lab Security Advisory 20121017-2 ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1,...