CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2020-14552

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2020-14552

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

Buffer overflow

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

Design/Logic Flaw

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2020-14611

CVE-2020-14611 affects Oracle WebCenter Portal (Oracle Fusion Middleware) — Composer component. Affected versions: 12.2.1.3.0 and 12.2.1.4.0. Root cause/exploit path: unauthenticated, network-accessible over HTTP, enabling an attacker to create, delete, or modify data, read data, and cause partia...

CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2020-14613

CVE-2020-14613 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Advanced User Interface component. Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise WebCenter Sites; exploitation requires user i...

CVE-2020-14613

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14611

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Composer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter...

CVE-2020-14613

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced User Interface. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14552

CVE-2020-14552 affects Oracle WebCenter Portal (Oracle Fusion Middleware) - Security Framework, with affected versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise WebCenter Portal and potentially access all p...

CVE-2020-14552

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Security Framework. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

The vulnerability of the Advanced UI component in Oracle WebCenter Sites, which allows a hacker to disclose protected information

The vulnerability of the Advanced UI component of the Oracle WebCenter Sites customer service application relates to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through HTTP requests...

Oracle WebCenter Content Unspecified Vulnerability (April 2018 CPU)

The version of Oracle WebCenter Content running on the remote host is affected by a vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. An easy to exploit...

Oracle WebCenter Sites Multiple Vulnerabilities (July 2019 CPU)

Oracle WebCenter Sites component of Oracle Fusion Middleware is vulnerable to multiple vulnerabilities : - A deserialization vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI Apache Groovy due to a lack of isolation of object...

Oracle WebCenter Portal Multiple Vulnerabilities (Apr 2020 CPU)

Binary data oraclewebcenterportalcpuapr2020.nbin...

Oracle WebCenter Sites Information Disclosure Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and more. WebCenter Sites is a Web experience management component that enables marketers and...

CVE-2020-2739

Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2020-2739

Oracle WebCenter Sites (component: Advanced UI) in Fusion Middleware, version 12.2.1.3.0, is affected by CVE-2020-2739. Multiple sources confirm an unauthenticated attacker with network access over HTTP can compromise the product, with human interaction required for exploitation; impact includes ...