CVE-2018-3233

CVE-2018-3233 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Vulnerable in 8.5.3 and 8.5.4. An unauthenticated attacker with network access via HTTP can potentially cause a hang or crash (DOS) and unauthorized read access to data in Outside In Technolo...

CVE-2018-3302

CVE-2018-3302 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Impact is that version 8.5.3/8.5.4 may allow an unauthenticated, network-accessible attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized data read, with user interaction required....

CVE-2018-3204

CVE-2018-3204 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition Analytics Server (subcomponent) in the 12.2.1.3.0 release. An unauthenticated attacker with network access over HTTP can compromise data; user interaction is required. CVSS v3.0 base score is 8.2 (High). The vulnerabili...

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3224

CVE-2018-3224 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Exploit path: unauthenticated, network access via HTTP; impact includes potentially hanging or crashing the Outside In runtime (DoS) ...

CVE-2018-2911

Oracle GlassFish Server (Fusion Middleware, Java Server Faces subcomponent) is affected in version 3.1.2. An unauthenticated attacker with network access over HTTP can compromise the server, potentially exposing or altering data and enabling partial denial of service. The CVE-2018-2911 descriptio...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3232

The CVE-2018-3232 vulnerability lies in Oracle Outside In Technology’s Outside In Filters (Oracle Fusion Middleware). Affected are Outside In Technology 8.5.3 and 8.5.4. An unauthenticated attacker with network access over HTTP can cause a hang/crash (DOS) and read a subset of data, with human in...

CVE-2018-3238

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2018-3210

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server...

CVE-2018-3168

CVE-2018-3168 affects the Oracle Identity Analytics component within Oracle Fusion Middleware (subcomponent Core Components), specifically version 11.1.1.5.8. The vulnerability, documented with CVSSv3.0 base score 7.1, enables a low-privilege, network-accessible attacker (via HTTP) to perform una...

CVE-2018-3234

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3238

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2018-2902

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3222

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3233

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3245

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3245

CVE-2018-3245 affects Oracle WebLogic Server (WLS Core Components). The connected documents identify a Java deserialization vulnerability that, when exploited, allows an unauthenticated attacker with network access via T3 to execute arbitrary code and potentially take over the server. Affects mul...

CVE-2018-3223

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...