Design/Logic Flaw

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Support Tools. Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Security. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2017-10037

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Web Service API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...

CVE-2017-10034

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Core Formatting API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

Design/Logic Flaw

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10037

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Web Service API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI...

CVE-2017-10259

The CVE-2017-10259 issue affects Oracle Fusion Middleware's Oracle Access Manager, specifically the Web Server Plugin in version 11.1.2.3.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise Oracle Access Manager, potentially yielding unauthorized access to sen...

CVE-2017-10051

CVE-2017-10051 affects Oracle Outside In Technology’s Outside In Filters component used by Oracle Fusion Middleware. The affected product/version is Oracle Outside In Technology 8.5.3.0, with a vulnerability that allows a low-privileged attacker with access to the physical network segment to caus...

CVE-2017-10055

CVE-2017-10055 affects Oracle iPlanet Web Server (Oracle Fusion Middleware) Admin Graphical User Interface, version 7.0. The vulnerability allows unauthenticated network access via HTTP to the Oracle iPlanet Web Server, with an attack requiring user interaction. Successful attacks can lead to una...

CVE-2017-10154

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager...

CVE-2017-10166

CVE-2017-10166 affects Oracle Fusion Middleware’s Oracle Security Service (subcomponent: Oracle SSL API). Vulnerable versions: Oracle Fusion Middleware 11.1.1.9.0 and 12.1.3.0.0. The issue allows an unauthenticated, network-accessible attacker over HTTPS to compromise the Oracle Security Service,...

CVE-2017-10334

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-10369

CVE-2017-10369 affects the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Affected versions are 11.1.1.7.0 and 11.1.1.9.0 . The vulnerability is described as difficult to exploit and allows a low-privilege attacker with network access via ...

CVE-2017-10034

Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware subcomponent: Core Formatting API. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle ...

CVE-2017-10270

Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware subcomponent: Microsoft Active Directory. The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracl...

CVE-2017-10360

CVE-2017-10360 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware for 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Content Server, potentially leading to unauthorized creation, del...

CVE-2017-10369

Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware subcomponent: Virtual Directory Server. Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10352

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2017-10334

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...