CVE-2017-3594

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3541

CVE-2017-3541 : A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server) affects 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. An unauthenticated attacker with network access over HTTP can compromise Oracle WebCenter Sites, potentially result...

CVE-2017-3625

CVE-2017-3625 affects Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected are 11.1.1.7, 11.1.1.9, 12.2.1.0, 12.2.1.1, and 12.2.1.2. The vulnerability is described as easily exploitable and allows an unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3591

CVE-2017-3591 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Catalog Mover subcomponent. Affects listed versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability can be exploited by an unauthenticated remote attacker over HTTP, with user interaction required...

CVE-2017-3542

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3596

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3596

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3603

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3597

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3543

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Server. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3554

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...

CVE-2017-3595

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3594

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2017-3596

Oracle WebCenter Sites (part of Oracle Fusion Middleware) is affected in versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 within the Advanced UI subcomponent. The CVE-2017-3596 issue is described as an easily exploitable vulnerability allowing a low-privileged, network-accessible attac...

CVE-2017-3542

CVE-2017-3542 affects Oracle WebCenter Sites (Oracle Fusion Middleware) Server subcomponent; affected versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. It allows an unauthenticated attacker over HTTP to access/modify data and cause partial DOS. CVSSv3.0 base score 8.6 (HIGH). Remediation: ...

CVE-2017-3540

Oracle WebCenter Sites within Oracle Fusion Middleware (Server subcomponent) is affected by CVE-2017-3540. Affected versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to cause a hang or crash (DOS) and perfor...

CVE-2017-3602

CVE-2017-3602 concerns Oracle WebCenter Sites (Oracle Fusion Middleware), specifically the Advanced UI subcomponent. Affected versions are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability allows a low-privileged, network-accessing attacker (via HTTP) to compromise WebCenter Si...

CVE-2017-3598

CVE-2017-3598 affects Oracle WebCenter Sites (Advanced UI) in Oracle Fusion Middleware. Affected versions include 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0. The vulnerability allows a low-privilege, network attacker to obtain unauthorized read access to a subset of data via HTTP. Base CV...

CVE-2017-3545

Vulnerability CVE-2017-3545 affects Oracle WebCenter Sites (Fusion Middleware) subcomponent Blob Server. Affected versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0. The issue allows an unauthenticated attacker with network access over HTTP to compromise the system, enabling unauthorized cr...

CVE-2017-3543

CVE-2017-3543 affects Oracle WebCenter Sites Server component in Oracle Fusion Middleware (versions 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0). An unauthenticated attacker with network access via HTTP can compromise data confidentiality, integrity, and availability. The vulnerability is desc...