Design/Logic Flaw

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service...

CVE-2015-0443

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444,...

CVE-2015-4745

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-1926

Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 and 11.1.1.9.0, and the Oracle Applications Framework component in Oracle E-Business Suite 12.2.3 and 12.2.4, allows remote authenticated users to affect confidentiality and integrity via...

CVE-2015-4758

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0443,...

CVE-2015-2606

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2658

Technical details about CVE-2015-2658 are not publicly available in the provided connected documents. The sources reference Oracle Fusion Web Cache vulnerability generally but do not specify affected versions, impact specifics, or fixes. Monitor for updates.

CVE-2015-1926

CVE-2015-1926 affects Oracle WebCenter Portal (Fusion Middleware 11.1.1.8.0/11.1.1.9.0) and Oracle Applications Framework in Oracle E-Business Suite 12.2.3/12.2.4. The IBM advisory describes the vulnerability as a Java Portlet Specification JSR 286 API jar file issue that could allow a remote att...

CVE-2015-2604

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2623

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related ...

CVE-2015-2602

Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...

CVE-2015-2605

CVE-2015-2605 affects Oracle Endeca Information Discovery Integrator ETL Server (Endeca IDI ETL Server) via a directory-traversal flaw in the MoveFile operation. Exploitation arises from insufficient input validation when handling crafted SOAP requests, enabling a remote authenticated attacker to...

CVE-2015-2606

CVE-2015-2606 is linked to Oracle Endeca Information Discovery (IDI) Integrator/ETL Server vulnerabilities in the Endeca suite. Connected advisories describe directory-traversal flaws in the Integrator ETL Server (operations such as DownloadFileConent, CopyFile, UploadFileConent, MoveFile) that o...

CVE-2015-2598

CVE-2015-2598 corresponds to an unspecified vulnerability in the Oracle BI Enterprise Edition mobile app component for Oracle Fusion Middleware (before 11.1.1.7.0 / 11.6.39) that allows remote authenticated users to affect integrity via unknown vectors related to Mobile – iPad. Affected software:...

CVE-2015-2623

The CVE-2015-2623 entry affects Oracle Fusion Middleware components: Oracle GlassFish Server (3.0.1, 3.1.2) and Oracle WebLogic Server (Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, 12.1.3.0). The underlying issue is related to JavaServer Faces, with remote attackers able to impact integrity vi...

CVE-2015-4758

Technical details for CVE-2015-4758 are not publicly provided in the supplied documents; monitor for updates from Oracle and associated security bulletins.

CVE-2015-0446

Technical details for CVE-2015-0446 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from vendors and security advisories.

CVE-2015-0443

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality based on Trillium, a different vulnerability than CVE-2015-0444,...

CVE-2015-4747

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CEP system...