Code injection

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10266

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10266

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10267

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10278

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10272

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While...

Design/Logic Flaw

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10278

CVE-2017-10278 is a heap overflow in Oracle Tuxedo’s Jolt protocol handling, affecting Oracle Fusion Middleware/Tuxedo components version 11.1.1, 12.1.1, 12.1.3 and 12.2.2. The underlying issue is a lack of proper length-field checks in the JOLT protocol structure, enabling an unauthenticated rem...

CVE-2017-10267

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10269

The CVE-2017-10269 entry concerns Oracle Tuxedo (a core component of Oracle Fusion Middleware) with affected versions 11.1.1, 12.1.1, 12.1.3, 12.2.2. Connected sources describe the issue as part of the Jolt protocol vulnerabilities (JoltandBleed) in Oracle Tuxedo/Jolt Server, enabling unauthentic...

CVE-2017-10272

CVE-2017-10272 affects Oracle Fusion Middleware’s Oracle Tuxedo core in versions 11.1.1, 12.1.1, 12.1.3 and 12.2.2. The vulnerability, stemming from memory disclosure in the Jolt server path, allows a low-privileged, network-authenticated attacker via Jolt to read server memory and potentially ac...

CVE-2017-10266

CVE-2017-10266 affects Oracle Tuxedo, a component of Oracle Fusion Middleware. The vulnerability allows an unauthenticated attacker with network access via Jolt to compromise Tuxedo, potentially enabling unauthorized read access to Oracle Tuxedo data. Affected supported versions are 11.1.1, 12.1....

CVE-2017-10269

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10272

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10272

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via Jolt to compromise Oracle Tuxedo. While...

CVE-2017-10278

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...

CVE-2017-10266

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware subcomponent: Core. Supported versions that are affected are 11.1.1, 12.1.1, 12.1.3 and 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Jolt to compromise Oracle Tuxedo...