Lucene search
K

149 matches found

Cvelist
Cvelist
added 2015/07/16 10:0 a.m.19 views

CVE-2015-4742

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0 allows remote attackers to affect availability via vectors related to ADF Faces...

5.8AI score0.00705EPSS
Exploits0References1
CVE
CVE
added 2015/07/16 10:0 a.m.60 views

CVE-2015-4742

CVE-2015-4742 describes an unspecified vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware, affecting versions 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0. It allows remote attackers to impact availability via vectors related to ADF Faces. The connected sources cor...

5CVSS5.9AI score0.00705EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/11/07 12:0 a.m.13 views

Oracle JDeveloper Installation Detection

Binary data oraclejdeveloperinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2014/11/07 12:0 a.m.42 views

Oracle JDeveloper ADF Faces goButton XSS (October 2014 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by a cross-site scripting XSS vulnerability in the Application Development Framework ADF Faces subcomponent due to improper encoding of URLs that are specified as a target for the...

4.3CVSS5.9AI score0.00311EPSS
Exploits0References3
NVD
NVD
added 2014/10/15 10:55 p.m.12 views

CVE-2014-6522

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

4.3CVSS5.7AI score0.00311EPSS
Exploits0References2
Prion
Prion
added 2014/10/15 10:55 p.m.19 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

4.3CVSS6.3AI score0.00311EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2014/10/15 10:3 p.m.51 views

CVE-2014-6522

Oracle JDeveloper ADF Faces goButton XSS (CVE-2014-6522) is described in the October 2014 CPU plugin as an XSS vulnerability in the ADF Faces subcomponent caused by improper encoding of URLs used as targets for the goButton. An unauthenticated, remote attacker can exploit this to execute arbitrar...

4.3CVSS5.9AI score0.00311EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2014/10/15 10:3 p.m.20 views

CVE-2014-6522

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7, 11.1.2.4, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect integrity via vectors related to ADF Faces...

5.7AI score0.00311EPSS
Exploits0References2
NVD
NVD
added 2014/07/17 5:10 a.m.10 views

CVE-2014-2493

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces...

6.4CVSS5.6AI score0.00897EPSS
Exploits0References4
Prion
Prion
added 2014/07/17 5:10 a.m.14 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces...

6.4CVSS6.1AI score0.00897EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2014/07/17 2:36 a.m.17 views

CVE-2014-2493

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.2.4.0, and 12.1.2.0.0 allows remote attackers to affect confidentiality and availability via vectors related to ADF Faces...

5.6AI score0.00897EPSS
Exploits0References4
CVE
CVE
added 2014/07/17 2:36 a.m.50 views

CVE-2014-2493

Technical details for CVE-2014-2493 are not publicly available in the provided connected documents beyond the shared description. Monitor for updates from official advisories and vulnerability databases.

6.4CVSS5.8AI score0.00897EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2014/01/15 5:45 p.m.3 views

JSF2: Multiple Information Disclosure flaws due to unsafe path traversal

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

5CVSS5.8AI score0.86817EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2013/10/16 3:55 p.m.2 views

CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

5CVSS5.6AI score0.86817EPSS
Exploits0References7
Prion
Prion
added 2013/10/16 3:55 p.m.15 views

Buffer overflow

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

5CVSS6.1AI score0.86817EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2013/10/16 3:0 p.m.22 views

CVE-2013-3827

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0...

5.5AI score0.86817EPSS
Exploits0References5
CVE
CVE
added 2013/10/16 3:0 p.m.230 views

CVE-2013-3827

CVE-2013-3827 affects Oracle GlassFish Server components in Fusion Middleware 2.1.1, 3.0.1, 3.1.2; Oracle JDeveloper in 11.1.2.3.0, 11.1.2.4.0, 12.1.2.0.0; and Oracle WebLogic Server in Fusion Middleware 10.3.6.0 and 12.1.1. The vulnerability, related to JavaServer Faces/Web Container handling, a...

5CVSS5.5AI score0.86817EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2013/10/16 3:0 p.m.29 views

CVE-2013-3827

Removed by vendor...

5CVSS6.7AI score0.86817EPSS
Exploits0
Exploit DB
Exploit DB
added 2013/10/15 12:0 a.m.57 views

Oracle GlassFish Server 2.1.1/3.0.1 - Multiple Subcomponent Resource Identifier Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/63052/info Oracle JavaServer Faces is prone to multiple directory-traversal vulnerabilities. Exploiting these issues may allow an attacker to obtain sensitive information that could aid in further attacks. This vulnerability affects the following products...

7AI score
Exploits0
Prion
Prion
added 2012/05/03 5:55 p.m.23 views

Design/Logic Flaw

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Java Business Objects...

4.3CVSS6.3AI score0.0039EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder