CVE-2018-3245

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3245

CVE-2018-3245 affects Oracle WebLogic Server (WLS Core Components). The connected documents identify a Java deserialization vulnerability that, when exploited, allows an unauthenticated attacker with network access via T3 to execute arbitrary code and potentially take over the server. Affects mul...

CVE-2018-3238

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2018-3238

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2018-3204

CVE-2018-3204 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition Analytics Server (subcomponent) in the 12.2.1.3.0 release. An unauthenticated attacker with network access over HTTP can compromise data; user interaction is required. CVSS v3.0 base score is 8.2 (High). The vulnerabili...

CVE-2018-3191

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2018-3201

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3197

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...

CVE-2018-3222

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3222

CVE-2018-3222 affects Oracle Outside In Technology (Outside In Filters) within Oracle Fusion Middleware and is observed in IBM FileNet Content Manager use cases. Affected versions: Outside In Technology 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated, network-accessing attacker (via ...

CVE-2018-3224

CVE-2018-3224 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected: Outside In Technology versions 8.5.3 and 8.5.4. Exploit path: unauthenticated, network access via HTTP; impact includes potentially hanging or crashing the Outside In runtime (DoS) ...

CVE-2018-3223

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3213

Oracle WebLogic Server vulnerability CVE-2018-3213 affects the Docker Images subcomponent of Oracle Fusion Middleware. The issue is exploitable via network access using T3 and can lead to unauthorized access to data or complete access to Oracle WebLogic Server data. Affected versions are those pr...

CVE-2018-3215

Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware subcomponent: Integrator ETL. Supported versions that are affected are 3.1.0 and 3.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2018-3210

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server...

CVE-2018-3218

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3218

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2018-3218

CVE-2018-3218 concerns Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware. The documented affected product/version in the provided data is Rational DOORS Next Generation 6.0.6, with IBM remediation indicating a fixed patch: upgrade to Rational DOORS Next Generation 6.0....

CVE-2018-3168

CVE-2018-3168 affects the Oracle Identity Analytics component within Oracle Fusion Middleware (subcomponent Core Components), specifically version 11.1.1.5.8. The vulnerability, documented with CVSSv3.0 base score 7.1, enables a low-privilege, network-accessible attacker (via HTTP) to perform una...

CVE-2018-2911

Oracle GlassFish Server (Fusion Middleware, Java Server Faces subcomponent) is affected in version 3.1.2. An unauthenticated attacker with network access over HTTP can compromise the server, potentially exposing or altering data and enabling partial denial of service. The CVE-2018-2911 descriptio...