CVE-2015-1926

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via...

CVE-2015-2606

CVE-2015-2606 is linked to Oracle Endeca Information Discovery (IDI) Integrator/ETL Server vulnerabilities in the Endeca suite. Connected advisories describe directory-traversal flaws in the Integrator ETL Server (operations such as DownloadFileConent, CopyFile, UploadFileConent, MoveFile) that o...

CVE-2015-2604

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2602

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2623

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related ...

CVE-2015-2623

The CVE-2015-2623 entry affects Oracle Fusion Middleware components: Oracle GlassFish Server (3.0.1, 3.1.2) and Oracle WebLogic Server (Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, 12.1.3.0). The underlying issue is related to JavaServer Faces, with remote attackers able to impact integrity vi...

CVE-2015-0446

Technical details for CVE-2015-0446 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from vendors and security advisories.

CVE-2015-1926

CVE-2015-1926 affects Oracle WebCenter Portal (Fusion Middleware 11.1.1.8.0/11.1.1.9.0) and Oracle Applications Framework in Oracle E-Business Suite 12.2.3/12.2.4. The IBM advisory describes the vulnerability as a Java Portlet Specification JSR 286 API jar file issue that could allow a remote att...

CVE-2015-4758

Technical details for CVE-2015-4758 are not publicly provided in the supplied documents; monitor for updates from Oracle and associated security bulletins.

CVE-2015-2605

CVE-2015-2605 affects Oracle Endeca Information Discovery Integrator ETL Server (Endeca IDI ETL Server) via a directory-traversal flaw in the MoveFile operation. Exploitation arises from insufficient input validation when handling crafted SOAP requests, enabling a remote authenticated attacker to...

CVE-2015-2606

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-4745

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2598

CVE-2015-2598 corresponds to an unspecified vulnerability in the Oracle BI Enterprise Edition mobile app component for Oracle Fusion Middleware (before 11.1.1.7.0 / 11.6.39) that allows remote authenticated users to affect integrity via unknown vectors related to Mobile – iPad. Affected software:...

CVE-2015-2658

Technical details about CVE-2015-2658 are not publicly available in the provided connected documents. The sources reference Oracle Fusion Web Cache vulnerability generally but do not specify affected versions, impact specifics, or fixes. Monitor for updates.

CVE-2015-0443

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444,...

CVE-2015-2634

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-4744

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2015-0445

Technical details for CVE-2015-0445 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2015-2635

CVE-2015-2635 affects Oracle Data Integrator (ODI) in Oracle Fusion Middleware 11.1.1.3.0. The vulnerability is described as unspecified with impact to confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium; exact root cause, vectors, affected O...

CVE-2015-4751

CVE-2015-4751 affects Oracle Fusion Middleware’s Oracle Access Management component (Oracle Access Manager) versions 11.1.1.7 and 11.1.2.2. The vulnerability is described in connected sources as an unspecified flaw within the Authentication Engine subcomponent that allows a remote attacker to cau...