CVE-2014-2481

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2480...

CVE-2014-4201

CVE-2014-4201 is an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware (versions 10.3.6.0, 12.1.1.0, 12.1.2.0) that can remotely affect availability via WLS - Web Services. The connected sources confirm the issue but do not provide concrete exploit details ...

CVE-2014-2479

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services...

CVE-2014-4210

CVE-2014-4210 is an unspecified WebLogic SSRF vulnerability affecting Oracle WebLogic Server in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0. It allows remote attackers to affect confidentiality via Web Services/WebLogic SSRF vectors. Public details describe an SSRF that could bypass network re...

CVE-2014-2480

IBM OpenPages with Application Server 6.2 through 7.0 is listed as potentially impacted by CVE-2014-2480 via Oracle WebLogic Server components. The IBM Security Bulletin notes an unspecified vulnerability with partial confidentiality, integrity, and availability impacts and provides a remediation...

CVE-2014-2480

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2014-2481...

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

CVE-2014-2481

Technical details for CVE-2014-2481 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-2479

CVE-2014-2479 is an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting WLS - Web Services. Affected versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The IBM bulletin describes a vulnerability in Oracle WebLogic Server related to the Web Services c...

PT-2014-1714 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description: The issue affects confidentiality and can be exploited by remote attackers through vectors related to WLS - Web Services in the Oracle WebLogic Server component of Oracle...

Oracle WebLogic Server Multiple Vulnerabilities (July 2014 CPU)

Binary data oracleweblogicservercpujul2014.nbin...

BEA Systems WebLogic Server and Express 7.0 Null Character DoS

No description provided by source. source: http://www.securityfocus.com/bid/4646/info BEA Systems WebLogic Server is an enterprise level web and wireless application server for Microsoft Windows and most Unix and Linux distributions. BEA WebLogic Express provides a platform for serving dynamic da...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService Remote File Deletion tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server 12.1.0.2.7 Production version...

BEA Systems Weblogic Server 4.0 x/4.5 x/5.1 x Double Dot Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/2138/info BEA Systems WebLogic Server is an enterprise level web and wireless application server. Unchecked buffers exist in a particular handler for URL requests that begin with two dots ... Depending on the data entered...

BEA WebLogic 7.0/8.1 Administration Console LoginForm.jsp Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13793/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'LoginForm.jsp'...

Oracle Weblogic Server 10.3 'console-help.portal' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability. An attacker with 'WLS Console Package' privileges can exploit this issue. The attacker may leverage this issue to execute arbitrary scrip...

Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message RCE

No description provided by source. Oracle Business Transaction Management Server 12.1.0.2.7 FlashTunnelService WriteToFile Message Remote Code Execution Exploit tested against: Microsoft Windows Server 2003 r2 sp2 Oracle WebLogic Server 12c 12.1.1 Oracle Business Transaction Management Server...

Oracle WebLogic Server Detection

Binary data oracleweblogicserverinstalled.nbin...

April 2014 Oracle Critical Patch Update

Software maker and database management company Oracle yesterday released its quarterly Critical Patch Update. The release resolves more than 100 security vulnerabilities, many of which received high common vulnerability scoring system base scores and should be applied as soon as possible. Product...

Oracle releases Critical Update to Patch 104 Vulnerabilities

It’s time to update your Java program as Oracle has released its massive patch package for multiple security vulnerabilities. The United States software maker Oracle releases its security updates every three months, which it referred to as "Critical Patch Updates" CPU. Yesterday, Oracle released...