CVE-2013-1514

CVE-2013-1514 affects Oracle Fusion Middleware 10.1.3.5 in the Oracle Containers for J2EE component. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity via vectors related to RMI Support. The information available does not specify affected produ...

CVE-2013-1522

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 contains CVE-2013-1522, an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Affected products/versions are cited by NVD; CVSSv2 base score 4.3 (MEDIUM) wi...

CVE-2013-1529

Unspecified vulnerability in the Oracle WebCenter Interaction component in Oracle Fusion Middleware 6.5.1 and 10.3.3.0 allows remote attackers to affect integrity via unknown vectors related to Image Service...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1565

Technical details about CVE-2013-1565 are not provided in the supplied documents; no affected product versions, root cause, or fix are disclosed. Monitor for updates.

CVE-2013-1514

Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote authenticated users to affect integrity via vectors related to RMI Support...

CVE-2013-1545

Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.5.0, and 11.1.1.6.0 allows remote attackers to affect availability via unknown vectors related to Web Listener...

CVE-2013-1542

CVE-2013-1542 refers to an unspecified vulnerability affecting Oracle Fusion Middleware 10.1.3.5, specifically the Oracle Containers for J2EE component. The impact is on integrity via unknown vectors related to the Servlet Runtime, with CVSS2 base score 4.3 (Network attack, no authentication, par...

CVE-2013-1559

CVE-2013-1559 affects Oracle WebCenter Content Content Server. Public records show a remote authenticated vulnerability in the CheckOutAndOpen.dll ActiveX control that can lead to remote code execution, with confirmed testing/exploitation against Oracle WebCenter Content 11.1.1.6.0 (and earlier 1...

CVE-2013-1516

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

CVE-2013-1503

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

CVE-2013-1504

Technical details about CVE-2013-1504 are not publicly available in the provided documents. Monitor for updates from official advisories and vendors.

CVE-2013-1497

Unspecified vulnerability in the Oracle COREid Access component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to WebGate - WebServer plugin...

CVE-2013-1508

Removed by vendor...

CVE-2013-1509

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites...

CVE-2012-4303

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

CVE-2013-1497

CVE-2013-1497 affects Oracle Fusion Middleware 10.1.4.3.0’s Oracle COREid Access component, specifically the WebGate-WebServer plugin, with remote integrity impact via unspecified vectors. The NVD entry cites a network-access vulnerability (CVSS v2 base 4.3, MEDIUM) but does not detail exploit ve...

Oracle Releases April 2013 Security Advisory

Oracle has released its Critical Patch Update for April 2013 to address 128 vulnerabilities across multiple products. This update contains the following security fixes: 4 for Oracle Database Server 29 for Oracle Fusion Middleware 6 for Oracle E-Business Suite 3 for Oracle Supply Chain Products...

CVE-2012-1016

The pkinitserverreturnpadata function in plugins/preauth/pkinit/pkinitsrv.c in the PKINIT implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a...

JBoss Enterprise Application Platform SecurityAssociation.getCredential() 安全绕过漏洞

BUGTRAQ ID: 57550 CVECAN ID: CVE-2012-3370 JBoss企业应用平台（JBoss Enterprise Application Platform，EAP）是J2EE应用的中间件平台。 JBoss Enterprise Application Platform，如果没有提供安全上下文给SecurityAssociation.getCredential，则其会返回之前的凭证。根据配置的应用，可允许远程攻击者劫持之前经过身份验证的用户凭证。 0 JBoss Group JBoss Enterprise Web Platform for RHEL 5...