CVE-2019-2609

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2605

CVE-2019-2605 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition (Web Catalog) with affected versions 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker, over HTTP, to read data from the BI EE Web Catalog; exploitation is de...

CVE-2019-2595

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

CVE-2019-2601

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

CVE-2019-2609

CVE-2019-2609 is described as an Oracle Outside In Technology (Outside In Filters) vulnerability affecting Oracle Fusion Middleware, with affected versions 8.5.3 and 8.5.4. Connected IBM/Red Hat documents confirm real-world applicability in Oracle Outside In Technology used by IBM Rational DOORS ...

CVE-2019-2588

CVE-2019-2588 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware. The NUCLEI template confirms a path traversal vulnerability in BI Publisher Security affecting versions 11.1.1.9.0, 12.2.1.3.0, and 12.2.1.4.0. An attacker could exploit a vulnerability in the BI Publisher ...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2578

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 (Advanced UI) is affected by CVE-2019-2578 due to broken access control. This could let an unauthenticated attacker with network access over HTTP gain unauthorized access to data across the WebCenter Sites instance. The CVSSv3 base score is 8.6 ...

CVE-2019-2578

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2572

CVE-2019-2572 affects Oracle Fusion Middleware Oracle SOA Suite (Fabric Layer) with version 11.1.1.9.0. The vulnerability is exploitable remotely over HTTP by an unauthenticated attacker and can lead to unauthorized read access to a subset of SOA Suite data. Affected component/issue is documented...

CVE-2019-2572

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

CVE-2019-2579

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 is affected by CVE-2019-2579, tied to a SQL injection vulnerability in the WebCenter Sites component (Advanced UI). The Nuclei template confirms a SQLi condition that is exploitable by a low-privileged attacker with network access over HTTP, pot...

CVE-2019-2578

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2572

Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware subcomponent: Fabric Layer. The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful...

CVE-2019-2568

CVE-2019-2568 affects Oracle WebLogic Server (WLS Core Components) and is applicable to WebLogic versions 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. The issue is a network-accessible vulnerability that allows a low-privilege, unauthenticated or low-privilege attacker with HTTP access to compromise th...

CVE-2019-2579

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites...

CVE-2019-2576

The CVE-2019-2576 vulnerability affects Oracle Fusion Middleware’s Oracle Service Bus, Web Container subcomponent, with confirmed impact on versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0. The issue allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle Servic...

CVE-2019-2616

Vulnerability in the BI Publisher formerly XML Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access...

Oracle Squashes 53 Critical Bugs in April Security Update

Oracle is urging customers to patch critical vulnerabilities in its products as part of its massive April update, which fixes a whopping 297 flaws. Of those flaws, 53 vulnerabilities in Oracle products had a CVSS score of 9.0 or higher, making them “critical” severity – and in fact, 49 of those...

Oracle Outside In Technology Access Control Error Vulnerability (CNVD-2019-27778)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...