CVE-2017-10154

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2017-10034

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Core Formatting API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2017-10270

CVE-2017-10270 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector component (Microsoft Active Directory subcomponent). The vulnerable item is Oracle Identity Manager Connector version 9.1.1.5.0; the issue allows an unauthenticated attacker with local access to th...

CVE-2017-10400

Removed by vendor...

CVE-2017-10259

The CVE-2017-10259 issue affects Oracle Fusion Middleware's Oracle Access Manager, specifically the Web Server Plugin in version 11.1.2.3.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise Oracle Access Manager, potentially yielding unauthorized access to sen...

CVE-2017-10055

CVE-2017-10055 affects Oracle iPlanet Web Server (Oracle Fusion Middleware) Admin Graphical User Interface, version 7.0. The vulnerability allows unauthenticated network access via HTTP to the Oracle iPlanet Web Server, with an attack requiring user interaction. Successful attacks can lead to una...

CVE-2017-10369

CVE-2017-10369 affects the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Affected versions are 11.1.1.7.0 and 11.1.1.9.0 . The vulnerability is described as difficult to exploit and allows a low-privilege attacker with network access via ...

CVE-2017-10051

CVE-2017-10051 affects Oracle Outside In Technology’s Outside In Filters component used by Oracle Fusion Middleware. The affected product/version is Oracle Outside In Technology 8.5.3.0, with a vulnerability that allows a low-privileged attacker with access to the physical network segment to caus...

CVE-2017-10166

CVE-2017-10166 affects Oracle Fusion Middleware’s Oracle Security Service (subcomponent: Oracle SSL API). Vulnerable versions: Oracle Fusion Middleware 11.1.1.9.0 and 12.1.3.0.0. The issue allows an unauthenticated, network-accessible attacker over HTTPS to compromise the Oracle Security Service,...

CVE-2017-10352

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2017-10334

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-10026

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

CVE-2017-10360

CVE-2017-10360 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware for 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Content Server, potentially leading to unauthorized creation, del...

CVE-2017-10360

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10400

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration Graphical User Interface. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2017-10360

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10166

Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware subcomponent: C Oracle SSL API. Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromis...

CVE-2017-10060

This CVE (CVE-2017-10060) affects Oracle Business Intelligence Enterprise Edition (OBIEE) within Oracle Fusion Middleware, specifically the Analytics Web General subcomponent. Affected versions are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability can be exploited by an unauth...

CVE-2017-10393

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...

CVE-2017-10391

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Administration. Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...