CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1559

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

CVE-2013-1516

CVE-2013-1516 concerns a buffer overflow in the BlackIceDevMode.ocx ActiveX control used by Oracle WebCenter Capture (formerly Oracle Document Capture). The Import Server subcomponent is affected, allowing command execution when a user loads a malicious page that calls SetAnnotationFont. Exploita...

CVE-2013-1529

Public details for CVE-2013-1529 are not provided in the supplied documents. They reference Oracle WebCenter Interaction components but give no concrete exploit, impact, or remediation. Monitor for updates.

CVE-2013-1522

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 contains CVE-2013-1522, an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Affected products/versions are cited by NVD; CVSSv2 base score 4.3 (MEDIUM) wi...

CVE-2012-4303

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

CVE-2013-1503

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2013-1509

Oracle WebCenter Sites Satellite Server (former FatWire Satellite Server) is affected by CVE-2013-1509 through HTTP header injection that can lead to cache poisoning and manipulation of HTTP response headers (e.g., Set-Cookie, Refresh). Affected versions include FatWire Satellite Server 7.6.0 Pat...

CVE-2013-1503

CVE-2013-1503 affects Oracle WebCenter Content’s Content Server component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via unknown vectors related to Content Server. Connected document...

CVE-2012-4303

Technical details for CVE-2012-4303 are not publicly provided in the connected documents. The available sources only describe an unspecified vulnerability in Oracle WebCenter Content with limited context. Monitor for updates from official advisories; avoid speculation.

Oracle WebCenter / Fatwire Header Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Server vulnerab...

SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server)

SEC Consult Vulnerability Lab Security Advisory 20121017-2 ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1,...

CVE-2012-5065

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...

CVE-2012-5065

CVE-2012-5065 concerns the Oracle WebCenter Sites component in Oracle Fusion Middleware (versions listed) with an unspecified, local vulnerability related to the ImagePicker that can let local users affect integrity. The connected documents confirm the issue but do not provide concrete exploit de...

CVE-2012-5065

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...

CVE-2012-3184

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Advanced UI...

CVE-2012-3186

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a differen...

CVE-2012-3185

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Advanced UI, a differen...