CVE-2018-3223

CVE-2018-3223 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The vulnerability affects the 8.5.3 and 8.5.4 releases of Outside In Technology and can allow an unauthenticated attacker with network access via HTTP to cause a hang or crash (denial of ser...

CVE-2018-3213

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Docker Images. The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3215

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3219

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3219

CVE-2018-3219 involves Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. The initial record specifies affected versions 8.5.3 and 8.5.4 with network-accessible, unauthenticated access requiring user interaction. Connected IBM and vendor pages confirm that multipl...

CVE-2018-3249

CVE-2018-3249 affects Oracle WebLogic Server 10.3.6.0 (WLS - Web Services). The description indicates an easily exploitable vulnerability via HTTP that can lead to unauthorized access to Oracle WebLogic Server data. Connected documents confirm related fixes were included in Oracle’s October 2018 ...

CVE-2018-3252

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3238

Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 is affected by a cross-site scripting vulnerability in the WebCenter Sites component (subcomponent: Advanced UI). The vulnerability, described as easily exploitable, could allow a high-privileged attacker with network access over HTTP to execute...

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3254

CVE-2018-3254 affects Oracle WebCenter Portal (WebCenter Spaces Application) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle WebCenter Portal data. The CV...

CVE-2018-3253

The CVE-2018-3253 entry concerns Oracle Fusion Middleware’s Oracle Virtual Directory component (Virtual Directory Manager). Affected are 11.1.1.7.0 and 11.1.1.9.0. The vulnerability is described as exploitable by a low-privileged attacker with network access over HTTP, potentially allowing unauth...

CVE-2018-3302

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3233

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3234

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3232

The CVE-2018-3232 vulnerability lies in Oracle Outside In Technology’s Outside In Filters (Oracle Fusion Middleware). Affected are Outside In Technology 8.5.3 and 8.5.4. An unauthenticated attacker with network access over HTTP can cause a hang/crash (DOS) and read a subset of data, with human in...

CVE-2018-3226

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3231

CVE-2018-3231 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. The vulnerability impacts Oracle Outside In 8.5.3 and 8.5.4, allowing an unauthenticated network attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized read access when data flows i...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3228

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...