CVE-2017-3596

Oracle WebCenter Sites (part of Oracle Fusion Middleware) is affected in versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 within the Advanced UI subcomponent. The CVE-2017-3596 issue is described as an easily exploitable vulnerability allowing a low-privileged, network-accessible attac...

CVE-2017-3595

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3598

CVE-2017-3598 affects Oracle WebCenter Sites (Advanced UI) in Oracle Fusion Middleware. Affected versions include 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability allows a low-privilege, network attacker to obtain unauthorized read access to a subset of data via HTTP. Base CV...

CVE-2017-3542

CVE-2017-3542 affects Oracle WebCenter Sites (Oracle Fusion Middleware) Server subcomponent; affected versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. It allows an unauthenticated attacker over HTTP to access/modify data and cause partial DOS. CVSSv3.0 base score 8.6 (HIGH). Remediation: ...

CVE-2017-3540

Oracle WebCenter Sites within Oracle Fusion Middleware (Server subcomponent) is affected by CVE-2017-3540. Affected versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or crash (DOS) and perfor...

CVE-2017-3507

CVE-2017-3507 affects Oracle Fusion Middleware’s Oracle Service Bus (Web Console Design) up to version 12.2.1.2.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to compromise Oracle Service Bus by performing unauthorized updates/inserts/deletes and reads, poten...

CVE-2017-3499

Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware subcomponent: Android Client. The supported version that is affected is prior to 11.1.12.0.0 17019101. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTPS to compromise...

CVE-2017-3626

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle...

CVE-2017-3545

Vulnerability CVE-2017-3545 affects Oracle WebCenter Sites (Fusion Middleware) subcomponent Blob Server. Affected versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise the system, enabling unauthorized cr...

CVE-2017-3499

CVE-2017-3499 affects Oracle Fusion Middleware’s Oracle Social Network Android Client (prior to 11.1.12.0.0). It is exploitable over HTTPS by an unauthenticated, network-accessing attacker, potentially leading to unauthorized access to confidential Oracle Social Network data. Root cause and speci...

CVE-2017-3596

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

Oracle Social Network Information Disclosure Vulnerability

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. A security vulnerability exists in Oracle Social Network versions prior to 11.1.12.0.0, which can be exploited by attackers to compromise confidentiality...

Oracle Fusion Middleware Oracle WebCenter Sites Component Remote Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

Oracle Fusion Middleware MapViewer Remote Vulnerability

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. Oracle Fusion Middleware MapViewer versions 11.1.1.9, 12.2.1.1, 12.2.1.2 suffer from a remote security vulnerability that could allow an attacker to compromise confidentiality, integrity, and...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05985)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05989)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05988)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05983)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...

SSRF Vulnerability in Jspxcms Enterprise Open Source Web Content Management System

jspxcms is an open source, Java-based content management system CMS. An SSRF vulnerability exists in the source and upfile parameters of the classes\com\jspxcms\core\web\fore\UploadController.java file in Jspxcms, which allows an attacker to initiate a request to an intranet host to obtain the...

Oracle WebCenter Sites Remote Vulnerability (CNVD-2017-05986)

Oracle Fusion Middleware Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebCenter Sites is a Web experience management component. Oracle Fusion Middleware versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0 of the...