Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

CVE-2011-2318

CVE-2011-2318 refers to an unspecified vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that allows local users to affect confidentiality (related to WLS Security). The description does not provide detai...

CVE-2011-2320

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

CVE-2011-2319

CVE-2011-2319 affects Oracle WebLogic Server within Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0. The vulnerability (described as unspecified) relates to JMS and can allow remote attackers to affect confidentiality. The linked sources do not provide a concrete root...

CVE-2011-2320

CVE-2011-2320 describes an unspecified vulnerability in Oracle WebLogic Server within Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that could allow remote attackers to affect confidentiality via Web Services-related vectors. The NVD entry lists a CVSS2 bas...

CVE-2011-2319

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

PT-2011-3770

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and is related to WLS Security, allowing local users to exploit it. Recommendations For versions 9.2.4.0 through 10.3.5.0, at the moment,...

PT-2011-3772

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and can be exploited by remote attackers via unknown vectors related to Web Services in the Oracle WebLogic Server component of Oracle Fusio...

CVE-2011-2319: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS...

CVE-2011-2320: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services...

CVE-2011-2318: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

PT-2011-3771

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 Description The issue affects confidentiality and is related to JMS. Recommendations For versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0, at the...

CVE-2011-2297

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

CVE-2011-2297

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

CVE-2011-2297

Technical details about CVE-2011-2297 are not publicly provided in the supplied documents. Monitor for updates from Oracle/CERT advisories for affected products and fixes.

CVE-2011-2297: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris Cluster 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Data Service for WebLogic Server...

PT-2011-3750

Name of the Vulnerable Software and Affected Versions Oracle Solaris Cluster version 3.3 Description The issue affects confidentiality, integrity, and availability. It is related to Data Service for WebLogic Server, but the specific vectors are unknown. Recommendations For Oracle Solaris Cluster...

Oracle WebLogic Server Session Fixation (CVE-2010-4437)

A Remote attacker can exploit this vulnerability by enticing an unsuspecting user to first open a specially crafted web page and then log in to the target service. A session fixation vulnerability has been reported in Oracle WebLogic Server. This is a session fixation vulnerability. The...