Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2022 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the April 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities: - An XML external entity vulnerability in the bundled jackson-databind component which allows an...

Oracle WebCenter Portal DoS (Jan 2022 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2022 Critical Patch Update CPU. It is, therefore, affected by a denial of service vulnerability in its bundled Log4j component. An unauthenticated, remote attacker could exploit this, ...

Oracle WebCenter Sites Multiple Vulnerabilities (Oct 2021 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware is affected by multiple vulnerabilities. - Component: WebCenter Sites Terracotta Quartz Scheduler. The supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker...

Oracle WebCenter Portal RCE (Oct 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the October 2021 Critical Patch Update CPU. It is, therefore, affected by a vulnerability in the Discussion Forums XStream component that is easily exploitable by a remote, low privileged attacker...

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in the following Oracle Fusion Middleware products: HTTP Server BAM Business Activity Monitoring WebCenter Portal Business Intelligence Enterprise Edition Real-Time Decision Server Data Integrator Outside In Technology WebLogic Server Enterprise Repository...

Oracle WebCenter Portal Multiple Vulnerabilities (Jul 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the July 2021 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities: - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component:...

Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2021 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities: - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware componen...

VulnCheck KEV: CVE-2012-1710

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer...

Trojan-Spy.Win32.WebCenter.a Information Disclosure

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/e3cf225a94c6be5a26fc21a1ec83f418.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.WebCenter.a Vulnerability: Information Disclosure Description: The trojan creates a...

Oracle WebCenter Portal Multiple Vulnerabilities (Jan 2021 CPU)

The version of Oracle WebCenter Portal installed on the remote host is missing a security patch from the January 2021 Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware...

Oracle WebCenter Sites (Jan 2021 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware is affected by a vulnerability in the jQuery component. Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. Note that...

Oracle WebCenter Portal Multiple Vulnerabilities (Oct 2020 CPU)

Binary data oraclewebcenterportalcpuoct2020.nbin...

The vulnerability of the Security Framework component of the Oracle WebCenter Portal web platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security Framework component of the Oracle WebCenter Portal exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Composer component of the Oracle WebCenter Portal, which allows a hacker to gain access to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Composer component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data, or to cause service interruptions using the HTTP protocol...

The vulnerability of the Advanced User Interface component of the Oracle WebCenter Sites application allows a malicious actor to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Advanced User Interface component of the Oracle WebCenter Sites application for online user services is related to the lack of protective measures for the website structure. Exploiting this vulnerability may allow an attacker, operating remotely, to modify, add, or delete...

Oracle WebCenter Sites (Jul 2020 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware is affected by a vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability...

Oracle Fusion Middleware WebCenter Sites Cross-Site Scripting Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and more. WebCenter Sites is a Web experience management component that enables marketers and...

Oracle WebCenter Portal Multiple Vulnerabilities (Jul 2020 CPU)

Binary data oraclewebcenterportalcpujul2020.nbin...

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Sites (CNVD-2020-43741 )

Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and more. WebCenter Sites is a Web experience management component that enables marketers and business users to...

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Portal

Oracle WebCenter Portal is a Web platform for creating intranets, extranets, portfolio applications, and self-service portals. A security vulnerability exists in the Security Framework component of WebCenter Portal versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0 in Oracle Fusion Middleware, which...