CVE-2017-3594

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3602

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3540

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3541

CVE-2017-3541 : A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) affects 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. An unauthenticated attacker with network access over HTTP can compromise Oracle WebCenter Sites, potentially result...

CVE-2017-3531

CVE-2017-3531 affects Oracle WebLogic Server (Servlet Runtime) in Oracle Fusion Middleware, with affected versions 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentially resulting in u...

CVE-2017-3625

CVE-2017-3625 affects Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected are 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1, and 12.2.1.2. The vulnerability is described as easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3591

CVE-2017-3591 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Catalog Mover subcomponent. Affects listed versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability can be exploited by an unauthenticated remote attacker over HTTP, with user interaction required...

CVE-2017-3545

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Blob Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-3601

Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware subcomponent: Oracle API Gateway. The supported version that is affected is 11.1.2.4.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle API Gateway...

CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2017-3601

CVE-2017-3601 affects Oracle Fusion Middleware's Oracle API Gateway (subcomponent Oracle API Gateway), specifically version 11.1.2.4.0. The vulnerability is exploitable over a network via HTTP and can be triggered by an unauthenticated attacker, with user interaction required for exploitation. Su...

CVE-2017-3543

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3595

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3506

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-3540

Oracle WebCenter Sites within Oracle Fusion Middleware (Server subcomponent) is affected by CVE-2017-3540. Affected versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or crash (DOS) and perfor...

CVE-2017-3602

CVE-2017-3602 concerns Oracle WebCenter Sites (Oracle Fusion Middleware), specifically the Advanced UI subcomponent. Affected versions are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise WebCenter Si...

CVE-2017-3596

Oracle WebCenter Sites (part of Oracle Fusion Middleware) is affected in versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 within the Advanced UI subcomponent. The CVE-2017-3596 issue is described as an easily exploitable vulnerability allowing a low-privileged, network-accessible attac...

CVE-2017-3499

Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware subcomponent: Android Client. The supported version that is affected is prior to 11.1.12.0.0 17019101. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTPS to compromise...

CVE-2017-3597

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3596

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...