3771 matches found
PT-2014-1711
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue allows remote attackers to disrupt data availability using the WebLogic Server JVM. The estimated number ...
PT-2014-1729
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0 through 12.1.2.0 Description The issue allows remote attackers to compromise the confidentiality, integrity, and availability of data using WLS - Web Services. This affects the Oracle WebLogic Server...
PT-2014-1725
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue allows remote attackers to compromise the confidentiality, integrity, and availability of data. The...
PT-2014-1712
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue allows remote attackers to affect availability via vectors related to WLS - Web Services. This can lead to a disruption in data access...
PT-2014-1728
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning WLS - Security and Policy in the Oracle WebLogic Server component ...
PT-2014-1719
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0, 10.3.6.0, 12.1.1.0 Description The issue allows remote attackers to compromise data integrity using WLS - Web Services in Oracle WebLogic Server. This is related to an unspecified vulnerability in the...
PT-2014-1726
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects the confidentiality, integrity, and availability of data. It can be exploited by remote attackers...
PT-2014-1720
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects the integrity of data and is related to the Console subcomponent. It allows remote attackers to...
PT-2014-1718
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description The issue allows remote attackers to compromise data integrity using WLS - Web Services. It affects the Oracle WebLogic Server component in Oracle Fusion Middleware,...
PT-2014-1724
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via vectors...
PT-2014-1713
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue allows remote attackers to disrupt data availability using WLS - Web Services. It affects the availability of data. Recommendations For versions 10.3.6.0,...
Oracle WebLogic Server Multiple Vulnerabilities (July 2014 CPU)
Binary data oracleweblogicservercpujul2014.nbin...
PT-2014-1714
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description The issue affects confidentiality and can be exploited by remote attackers through vectors related to WLS - Web Services in the Oracle WebLogic Server component of Oracle...
BEA WebLogic 7.0/8.1 Administration Console LoginForm.jsp Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13793/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp'...
Oracle Weblogic Server 10.3 'console-help.portal' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability. An attacker with 'WLS Console Package' privileges can exploit this issue. The attacker may leverage this issue to execute arbitrary scrip...
BEA Systems Weblogic Server 4.0 x/4.5 x/5.1 x Double Dot Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two dots ... Depending on the data entered...
BEA Systems WebLogic Server and Express 7.0 Null Character DoS
No description provided by source. source: http://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic da...
Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion
No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version...
Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message RCE
No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message Remote Code Execution Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server...