CVE-2012-3175

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518...

PT-2012-4537 · Oracle · Oracle Application Server Single Sign-On

Name of the Vulnerable Software and Affected Versions: Oracle Application Server Single Sign-On version 10.1.4.3.0 Description: The issue affects the integrity of the system, related to Redirects. Recommendations: For version 10.1.4.3.0, at the moment, there is no information about a newer versio...

CVE-2012-3175

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-0518...

CVE-2012-3175

Technical details for CVE-2012-3175 are not publicly provided in the connected documents. The available sources mention Oracle SSO 10.1.4.3.0 and redirects generally, but no concrete exploit, affected components/versions, root cause, or fixes are described here. Monitor for updates.

Code injection

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

UBUNTU-CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

CVE-2012-3155

Unspecified vulnerability in the CORBA ORB component in Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1 and 3.1.2, and Sun Java System Application Server 8.1 and 8.2 allows remote attackers to affect availability, related to CORBA ORB...

CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175...

CVE-2012-3155

The CVE-2012-3155 entry concerns an unspecified DoS vulnerability in the CORBA ORB subcomponent affecting Sun GlassFish Enterprise Server 2.1.1, Oracle GlassFish Server 3.0.1/3.1.2, and Sun Java System Application Server 8.1/8.2. The flaw targets the CORBA ORB component and is described as allowi...

CVE-2012-0518

Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175...

Microsoft Windows Kernel 'Win32k.sys' Integer Overflow Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Technologies Affected Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0.1 Avaya Communication Server 10...

Oracle Identity Management 10g Cross Site Scripting

Oracle Identity Management 10g username XSS POST Injection Vulnerability form name="XSS" method="P...

IBM WebSphere Application Server 7.0 < Fix Pack 25 Multiple Vulnerabilities

IBM WebSphere Application Server 7.0 before Fix Pack 25 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - Several errors exist related to SSL/TLS that can allow an attacker to carry out denial of service attacks against the...

IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host. As such, it is potentially affected by the following vulnerabilities : - An error exists related to 'Application Snoop Servlet' and missing access controls. This error can allow sensitive information...

IBM WebSphere Application Server for z/OS CBIND检查绕过漏洞

CVE ID: CVE-2012-3311 IBM WebSphere Application Server WAS是由IBM遵照开放标准开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS 8.5、8.0-8.0.0.4、7.0-7.0.0.23、6.1.0-6.1.0.43版本在执行CBIND检查时存在错误，成功利用后可绕过某些安全限制，访问或修改非法应用数据。 0 IBM Websphere Application Server 8.5.x IBM Websphere Application Server 8.0.x IB...

CVE-2012-3306

IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1, when multi-domain support is configured, does not purge password data from the authentication cache, which has unspecified impact and remote attack vectors...

Directory traversal

Directory traversal vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file...

CVE-2012-3305

Directory traversal vulnerability in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to overwrite arbitrary files via a crafted application file...

CVE-2012-3304

The Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors...