CVE-2018-3007

CVE-2018-3007 concerns Oracle Fusion Middleware’s Oracle Tuxedo Core. The vulnerability affects Tuxedo versions 12.1.1, 12.1.3, and 12.2.2, and can be exploited by an unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. The impact is high severity, with potential una...

CVE-2018-3098

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3103

CVE-2018-3103 affects the Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected version: Outside In Technology 8.5.3; vulnerability allows an unauthenticated attacker with network access via HTTP to access data and potentially cause partial DOS. IBM/Oracle a...

CVE-2018-3105

CVE-2018-3105 affects Oracle Fusion Middleware/SOA Suite (Health Care FastPath). Affected products/versions: Oracle SOA Suite in 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3.0. The issue is exploitable by a low-privileged attacker over HTTP with network access, leading to unauthorized...

CVE-2018-3007

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While the...

CVE-2018-2958

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3097

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2925

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise ...

CVE-2018-2998

CVE-2018-2998 affects Oracle WebLogic Server (SAML subcomponent) in Oracle Fusion Middleware. Affects supported versions: 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3. An attacker with network access over HTTP and low privileges can potentially perform unauthorized updates/inserts/deletes and read acce...

CVE-2018-2943

Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware subcomponent: Map Builder. Supported versions that are affected are 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3099

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3098

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2900

CVE-2018-2900 affects Oracle BI Publisher (Layout Tools) within Oracle Fusion Middleware. Affected: BI Publisher component, 11.1.1.7.x prior to 11.1.1.7.180717 or 11.1.1.9.x prior to 11.1.1.9.180717 (and related versions per the July 2018 CPU advisory). Affected configuration allows unauthenticat...

CVE-2018-3010

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2893

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

CVE-2018-3096

CVE-2018-3096 is the Oracle Outside In Technology (Outside In Filters) vulnerability with a CVSSv3 base score of 7.1 (HIGH). Public documents confirm the issue affects Oracle Outside In Technology 8.5.3 used within Oracle Fusion Middleware and note unauthenticated network access via HTTP with use...

CVE-2018-3102

CVE-2018-3102 concerns Oracle Outside In Technology's Outside In Filters in Oracle Fusion Middleware (affected: Outside In Technology, 8.5.3). The vulnerability is exploitable over network via HTTP by an unauthenticated attacker and requires human interaction, potentially leading to unauthorized ...

CVE-2018-3009

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-2987

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-3101

Affected product: Oracle WebCenter Portal, a component of Oracle Fusion Middleware (subcomponent: Portlet Services). Affected versions: 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Impact: unauthenticated, network-accessible via HTTP attacker can read a subset of data in WebCenter Portal (CVSSv3 base s...