9343 matches found
CVE-2019-2705
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2705
CVE-2019-2705 is a vulnerability in Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected are Oracle Outside In Technology 8.5.3 and 8.5.4. The issue allows an unauthenticated, network-accessible attacker (via HTTP) to cause a hang or crash (DOS) and potenti...
CVE-2019-2705
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2658
CVE-2019-2658 affects Oracle WebLogic Server (WLS Core Components). Affected versions are 10.3.6.0.0 and 12.1.3.0.0. The flaw allows an unauthenticated attacker with network access over HTTP to compromise and potentially take over the WebLogic Server, via the WLS Core Components/T3/Web services s...
CVE-2019-2647
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2647
CVE-2019-2647 is a vulnerability in Oracle WebLogic Server (WLS – Web Services subcomponent). Affected versions are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. An unauthenticated attacker with network access via HTTP can exploit this to obtain unauthorized access to data or otherwise compromise WebLog...
CVE-2019-2650
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2649
CVE-2019-2649 affects Oracle WebLogic Server (WLS - Web Services) within Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise WebLogic Server, potentially leading to...
CVE-2019-2646
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2019-2646
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2019-2645
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
CVE-2019-2645
CVE-2019-2645 affects Oracle WebLogic Server (WLS Core Components). Affected versions are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The underlying issue allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially taking over the server. CVSS v3.0 base sco...
CVE-2019-2648
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2649
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2649
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2645
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...
CVE-2019-2648
CVE-2019-2648 affects Oracle WebLogic Server (WLS - Web Services) in Oracle Fusion Middleware. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability enables unauthenticated, network-based access via HTTP to compromise the server and potentially access or exfiltrate data (C: HIG...
CVE-2019-2648
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-2646
CVE-2019-2646 affects Oracle WebLogic Server (EJB Container). Affected versions are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The issue allows an unauthenticated, network-accessible attacker via T3 to compromise and takeover the WebLogic Server, exposing confidentiality, integrity and availability. ...
CVE-2019-2650
The CVE-2019-2650 issue affects Oracle WebLogic Server (WLS - Web Services subcomponent) in Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise the server, potentia...