Design/Logic Flaw

Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components...

Buffer overflow

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors related to SAML, a different vulnerability than CVE-2015-0389...

CVE-2014-6569

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components...

CVE-2014-6576

Unspecified vulnerability in the Oracle Adaptive Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via vectors related to OAM Integration...

CVE-2014-6580

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2014-6592

Technical details for CVE-2014-6592 are not provided in the supplied connected documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete information.

CVE-2014-6576

Oracle Fusion Middleware’s Oracle Adaptive Access Manager (OAM) component (versions 11.1.1.5, 11.1.1.7, 11.1.2.1, 11.1.2.2) contains an unspecified vulnerability in the OAM Integration subcomponent that could allow remote authenticated users to impact confidentiality and integrity. The provided d...

CVE-2014-6548

CVE-2014-6548 affects Oracle Fusion Middleware 11.1.1.7, specifically the Oracle SOA Suite B2B Engine subcomponent. A local user can exploit an unspecified vulnerability to impact confidentiality, integrity, and availability, with the local-attack vector and partial CIA impacts noted. Some connec...

CVE-2014-6592

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via vectors related to SAML, a different vulnerability than CVE-2015-0389...

CVE-2014-6571

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2011-1944...

CVE-2014-6548

Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 allows local users to affect confidentiality, integrity, and availability via vectors related to B2B Engine...

CVE-2014-6571

The provided documents do not contain any concrete technical details for CVE-2014-6571; no affected products, root cause, or remediation are listed. Monitor for updates.

CVE-2014-6580

Technical details about CVE-2014-6580 are not publicly available in the provided documents. The records only indicate an unspecified vulnerability in Oracle Reports Developer within Oracle Fusion Middleware; monitor for updates and additional disclosures.

CVE-2014-6526

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

CVE-2014-0191

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

Design/Logic Flaw

The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation i...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related to Admin Console...

Oracle releases 169 Updates, Including 19 Patches for JAVA Vulnerabilities

Get Ready to update your Java program as Oracle has released its massive patch package for multiple security vulnerabilities in its software. The United States software maker Oracle releases its security updates every three months on Tuesday, which it referred to as "Critical Patch Updates" CPU...

CVE-2014-6526

CVE-2014-6526 concerns Oracle Directory Server Enterprise Edition (ODSEE) Admin Console in Oracle Fusion Middleware 7.0. The vulnerability is described as unspecified and allows remote attackers to affect integrity via unknown vectors related to the Admin Console. No concrete root cause, affected...