Consul by HashiCorp: from Infoleak to RCE

Consul is a software first released in 2014 for DNS-based service discovery. It provides distributed key-value storage, segmentation, and configuration. Registered services and nodes can be queried using a DNS interface or an HTTP interface. Wikipedia Basically, Consul ensures the coherence of...

Oracle WebCenter Portal Multiple Vulnerabilities (Oct 2020 CPU)

Binary data oraclewebcenterportalcpuoct2020.nbin...

VulnCheck KEV: CVE-2020-2555

Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail...

The vulnerability of the CacheStore component of the Oracle Coherence software platform, which allows a hacker to trigger a service failure.

The vulnerability of the CacheStore component of the Oracle Coherence software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Oracle Coherence (July 2020 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the July 2020 Oracle CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

CVE-2020-14642 affects Oracle Coherence (Fusion Middleware) CacheStore. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability permits an unauthenticated remote attacker over HTTP to cause a hang or complete DoS in Oracle Coherence. CVSS 3.1 base score 7....

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2020-14642

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: CacheStore. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle Coherence (Jan 2020 CPU)

The version of the tested product installed on the remote host is prior to tested version. It is, therefore, affected by a remote code execution vulnerability, as referenced in the January 2020 Oracle CPU advisory. Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware componen...

Oracle Coherence (Apr 2020 CPU)

The version of the tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities, as referenced in the April 2020 Oracle CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Caching,...

The vulnerabilities of the Caching components, CacheStore, and the software platform for data processing in Oracle Coherence allow a hacker to gain full control over the application.

The vulnerability of the Caching, CacheStore, and Invocation components of the Oracle Coherence data processing software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application through the IIOP an...

The vulnerabilities of the Caching components, CacheStore, and the software platform for data processing in Oracle Coherence allow a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Caching, CacheStore, and Invocation components of the Oracle Coherence data processing software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the HT...

Exploit for Deserialization of Untrusted Data in Oracle Access_Manager

CVE-2020-2555 概述 在2020年1月，互联网上爆出了Weblogic反序列化远程命令执行漏洞（CVE-2020-2555），Oracle Fusion中间件Oracle Coherence存在缺陷，攻击者可利用该漏洞在未经授权下通过构造T3协议请求，获取Weblogic服务器权限，执行任意命令，风险较大。 影响 Oracle Coherence 3.7.1.17 Oracle Coherence & Weblogic 12.1.3.0.0 Oracle Coherence & Weblogic 12.2.1.3.0 Oracle Coherence & Weblogic...

Oracle Coherence Installed

Binary data oraclecoherenceinstalled.nbin...

Oracle: Unpatched Versions of WebLogic App Server Under Active Attack

Oracle is urging customers to fast-track a patch for a critical flaw in its WebLogic Server under active attack. The company said it has received numerous reports that attackers were targeting the vulnerability patched last month. Oracle WebLogic Server is a popular application server used in...

Oracle WebLogic Server T3 Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Oracle Coherence library. The issue results from the lack of proper validation of...

Oracle Coherence Remote Code Execution Vulnerability

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiency by leveraging modern hardware and software...