Design/Logic Flaw

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Request Management & Workflow. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...

CVE-2021-2450

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2021-2451

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Buffer overflow

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Buffer overflow

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Buffer overflow

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Buffer overflow

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-59238)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and many other applications in one seamlessly integrated management suite. Oracle...

Oracle Identity Manager has an unspecified vulnerability (CNVD-2021-54686)

Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation, which provides middleware, software collections, and other features. An unspecified vulnerability exists in Oracle Identity Manager in Oracle Fusion Middleware. An...

Oracle Coherence Multiple Vulnerabilities (Jul 2021 CPU)

The 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 versions of Coherence installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core...

Oracle Identity Manager has an unspecified vulnerability (CNVD-2021-54685)

Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation, which provides middleware, software collections, and other features. An unspecified vulnerability exists in Oracle Identity Manager in Oracle Fusion Middleware. An...

Vulnerabilities fixed in Oracle Fusion Middleware products

Oracle has fixed vulnerabilities in several products in the Oracle Fusion product group. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Denial-of-Service DoS. Bypassing authentication Bypassing security measure Remot...

CVE-2021-2458

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Identity Console. Supported versions that are affected are 11.1.2.2.0, 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2458

CVE-2021-2458 affects Oracle Fusion Middleware Identity Manager (Identity Console) with affected versions 11.1.2.2.0, 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows a low-privileged, network-accessing attacker to compromise Identity Manager via HTTP, with user interaction requir...

CVE-2021-2457

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Request Management & Workflow. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...

CVE-2021-2457

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Request Management & Workflow. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager...

CVE-2021-2457

CVE-2021-2457 affects Oracle Identity Manager (part of Oracle Fusion Middleware), specifically the Identity Manager component: Request Management & Workflow. Affected version is 11.1.2.3.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to read restricted Identi...

CVE-2021-2456

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2021-2456

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web General. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2021-2456

CVE-2021-2456 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (OBIEE) Analytics Web General component, version 12.2.1.4.0. The Red Hat RH advisory and ZDI-21-885 describe an unauthenticated remote code execution vector through BIRemotingServlet deserialization, ...