Buffer overflow

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability via unknown vectors related to Admin Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin...

CVE-2014-2425

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2014-2426

Technical details about CVE-2014-2426 are not publicly available in the provided documents; monitor for updates.

CVE-2014-2416

CVE-2014-2416 affects Oracle Data Profiling and Data Quality for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is a dereferencing error in the TSS12.DscForms.DateTimeWrapper ActiveX control, leading to remote code execution when a user opens a crafted page. This is part of...

CVE-2014-2415

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2416,...

CVE-2014-2424

CVE-2014-2424 affects the Oracle Event Processing component of Oracle Fusion Middleware 11.1.1.7.0. The vulnerability resides in the FileUploadServlet, described as a directory traversal flaw that allows an arbitrary file upload, enabling a remote attacker to place files on the server. The CVE no...

CVE-2014-2416

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2452

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 allows remote authenticated users to affect availability via unknown vectors related to Webserver Plugin...

CVE-2014-2417

Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.3.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Data Quality, a different vulnerability than CVE-2014-2407, CVE-2014-2415,...

CVE-2014-2424

Unspecified vulnerability in the Oracle Event Processing component in Oracle Fusion Middleware 11.1.1.7.0 allows remote authenticated users to affect integrity via vectors related to CEP system...

CVE-2014-2411

Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security...

CVE-2014-2418

CVE-2014-2418 affects Oracle Data Quality and Profiling for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is an untrusted pointer dereference in the TSS12.DscTools.FileChooserDlg ActiveX control, enabling remote code execution when a user opens a malicious page. This CVE i...

CVE-2014-2415

CVE-2014-2415 pertains to Oracle Data Quality and Data Profiling for Data Integrator (Oracle Fusion Middleware 11.1.1.3.0). The root cause is a dereferencing of arbitrary pointers in multiple ActiveX controls used by Data Quality tooling (examples cited in checkpoints: PostcardPreviewInt, FileCho...

CVE-2014-2470

CVE-2014-2470 is described in IBM OpenPages with Application Server security bulletin as an unspecified vulnerability in Oracle WebLogic Server related to the WLS Security component, affecting IBM OpenPages with Application Server 6.0–7.0. The IBM advisory associates the vulnerability with CVE-20...

CVE-2014-2426

Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity and availability via unknown vectors related to Admin Console...

CVE-2014-2411

CVE-2014-2411 affects Oracle Identity Analytics (Oracle Fusion Middleware) 11.1.1.5 and Sun Role Manager 5.0. an unspecified vulnerability could be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors related to Security. The connected...

CVE-2014-2452

Technical details about CVE-2014-2452 are not publicly provided in the connected documents. No explicit affected version, root cause, impact, or remediation is described here. Monitor for updates.

CVE-2014-2399

Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery Formerly Latitude, a different vulnerability than CVE-2014-2400...