CVE-2017-10196

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside I...

CVE-2017-10035

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successfu...

CVE-2017-10059

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Mobile Service. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10141

CVE-2017-10141 affects Oracle Outside In Technology (Outside In Filters) used in Oracle Fusion Middleware. Vulnerable component: Outside In Filters within Oracle Outside In Technology; affected version: 8.5.3.0. Description and connected sources confirm unauthenticated access over HTTP can cause ...

CVE-2017-10028

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10178

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10041

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise BI Publisher...

CVE-2017-10058

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Administration. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker...

CVE-2017-10156

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10156

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10058

Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware subcomponent: Analytics Web Administration. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows high privileged attacker...

CVE-2017-10075

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware subcomponent: Content Server. Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10040

Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware is affected by CVE-2017-10040 in versions 11.1.1.9.0 and 12.2.1.1.0. The vulnerability enables unauthenticated network access via HTTP with required user interaction, potentially allowing unauthorized creation, deletion or ...

CVE-2017-10063

The CVE-2017-10063 entry affects Oracle WebLogic Server (Web Services subcomponent) in Oracle Fusion Middleware. Affected versions are 10.3.6.0, 12.1.3.0, 12.2.1.1, and 12.2.1.2. It is described as difficult to exploit but allows an unauthenticated attacker with network access via HTTP to comprom...

CVE-2017-10075

Oracle WebCenter Content (Content Server) versions 11.1.1.9.0, 12.2.1.1.0, and 12.2.1.2.0 are susceptible to Cross-Site Scripting (XSS). The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to cause the browser of visiting users to execute HTML/JavaScript, potentiall...

CVE-2017-10123

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2017-10025

CVE-2017-10025 affects Oracle Fusion Middleware BI Publisher, specifically the BI Publisher Security component in 11.1.1.7.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, potentially yielding unauthorized access to critical data or data wit...

CVE-2017-10119

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: OSB Web Console Design, Admin. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Servic...

CVE-2017-10029

Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: Web Server. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful attacks...

CVE-2017-10137

CVE-2017-10137 affects Oracle WebLogic Server (Oracle Fusion Middleware), subcomponent JNDI . Affected versions are 10.3.6.0 and 12.1.3.0 . The vulnerability is described as easily exploitable with an unauthenticated attacker who can reach the server over HTTP , potentially leading to takeover of...