CVE-2014-2481

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480...

CVE-2014-4217

CVE-2014-4217 affects Oracle WebLogic Server components under Oracle Fusion Middleware (10.0.2.0, 10.3.6.0, 12.1.1.0). The vulnerability is described as unspecified and related to WLS Web Services, enabling remote integrity impact. No explicit remediation details are provided in the supplied docu...

CVE-2014-4202

CVE-2014-4202 is an unspecified vulnerability in Oracle WebLogic Server, specifically in the WLS Web Services component, that could allow a remote attacker to cause a denial of service. Affected Oracle Fusion Middleware/WebLogic versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The ent...

CVE-2014-4217

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, and 12.1.1.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services...

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

CVE-2014-4201

CVE-2014-4201 is an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware (versions 10.3.6.0, 12.1.1.0, 12.1.2.0) that can remotely affect availability via WLS - Web Services. The connected sources confirm the issue but do not provide concrete exploit details ...

CVE-2014-2479

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services...

CVE-2014-2480

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481...

CVE-2014-2480

IBM OpenPages with Application Server 6.2 through 7.0 is listed as potentially impacted by CVE-2014-2480 via Oracle WebLogic Server components. The IBM Security Bulletin notes an unspecified vulnerability with partial confidentiality, integrity, and availability impacts and provides a remediation...

CVE-2014-4210

CVE-2014-4210 is an unspecified WebLogic SSRF vulnerability affecting Oracle WebLogic Server in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0. It allows remote attackers to affect confidentiality via Web Services/WebLogic SSRF vectors. Public details describe an SSRF that could bypass network re...

CVE-2014-2479

CVE-2014-2479 is an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting WLS - Web Services. Affected versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The IBM bulletin describes a vulnerability in Oracle WebLogic Server related to the Web Services c...

CVE-2014-2481

Technical details for CVE-2014-2481 are not publicly available in the provided documents. Monitor for updates.

PT-2014-1714 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description: The issue affects confidentiality and can be exploited by remote attackers through vectors related to WLS - Web Services in the Oracle WebLogic Server component of Oracle...

Oracle WebLogic Server Multiple Vulnerabilities (July 2014 CPU)

Binary data oracleweblogicservercpujul2014.nbin...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version...

BEA Systems WebLogic Server and Express 7.0 Null Character DoS

No description provided by source. source: http://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic da...

BEA Systems Weblogic Server 4.0 x/4.5 x/5.1 x Double Dot Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two dots ... Depending on the data entered...

Oracle Weblogic Server 10.3 'console-help.portal' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability. An attacker with 'WLS Console Package' privileges can exploit this issue. The attacker may leverage this issue to execute arbitrary scrip...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message RCE

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message Remote Code Execution Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server...

BEA WebLogic 7.0/8.1 Administration Console LoginForm.jsp Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13793/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp'...