CVE-2015-4963

IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

CVE-2015-4963

IBM Security Access Manager for Web is affected by CVE-2015-4963 due to mishandling of WebSEAL HTTPTransformation requests, allowing remote attackers to read/write arbitrary files. Affected versions include SAM for Web 7.x all releases prior to 7.0.0.16 and 8.x prior to 8.0.1.3. Remediation is av...

IBM Security Access Manager for Web Information Disclosure Vulnerability

IBM Security Access Manager for Web is a suite of products used in user authentication, authorization and Web single sign-on solutions that provide user access management and Web application protection. An information disclosure vulnerability exists in IBM Security Access Manager for Web, which...

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle Access Manager component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read data...

CVE-2015-4912

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

Vulnerability in Oracle Fusion Middleware Oracle Access Manager Component

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation that provides middleware, software collections, and other capabilities.Oracle Access Manager is one of the components that provides identity...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allows remote attackers to affect confidentiality via vectors related to SSO Engine...

CVE-2015-4912

CVE-2015-4912 affects Oracle Fusion Middleware Oracle Access Manager (OAM) 11.1.2.2 and 11.1.2.3, specifically the SSO Engine subcomponent. The vulnerability is described as an unspecified flaw that could allow remote attackers to compromise confidentiality via the SSO Engine, indicating an infor...

Oracle Access Manager Information Disclosure (October 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by an information disclosure vulnerability due to an unspecified flaw in the SSO Engine subcomponent. An unauthenticated, remote attacker can exploit this to disclose sensitive information. %NASLMINLEVEL 70300 C Tenable...

The vulnerability of the Oracle Fusion Middleware software platform allows a perpetrator to compromise the confidentiality and integrity of information.

The vulnerability of the Oracle Access Manager component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of information...

Unspecified Vulnerability in Oracle Fusion Oracle Access Manager Component (CNVD-2015-04872)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Access Manager component that can be exploited by remote attackers to impact system availability...

Unspecified Vulnerability in Oracle Fusion Oracle Access Manager Component (CNVD-2015-04875)

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. A security vulnerability exists in the Oracle Fusion Oracle Access Manager component that can be exploited by remote attackers to compromise system integrity, confidentiality...

CVE-2015-4751

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown vectors related to Authentication Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown vectors related to Authentication Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-2593

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-4751

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect availability via unknown vectors related to Authentication Engine...

CVE-2015-4751

CVE-2015-4751 affects Oracle Fusion Middleware’s Oracle Access Management component (Oracle Access Manager) versions 11.1.1.7 and 11.1.2.2. The vulnerability is described in connected sources as an unspecified flaw within the Authentication Engine subcomponent that allows a remote attacker to cau...

CVE-2015-2593

CVE-2015-2593 affects Oracle Fusion Middleware 11.1.2.2 specifically the Oracle Access Manager component, with the Configuration Service as the vulnerable subcomponent. The vulnerability allows remote authenticated users to impact confidentiality and integrity via unspecified vectors. The availab...

Oracle Access Manager Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Configuration Service subcomponent that allows a remote, authenticated attacker to impact confidentiality and integrity. CVE-2015-2593 - An unspecified...