CVE-2016-5511

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2016-5511: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12.2.1.0.0, 12.2.1.1.0, and 12.2.1.2.0 allows remote attackers to affect integrity via unknown vectors...

PT-2016-6498

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 12.2.1.0.0 through 12.2.1.2.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors. Recommendations For versions 12.2.1.0.0 through 12.2.1.2.0, a...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebCenter Sites Component (CNVD-2016-10171)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

LocalTapiola: Oracle Webcenter Sites administrative and hi-privilege access available directly from the internet (/cs/Satellite)

Issue The reporter found several severe and highly critical issues in the Oracle Webcenter Sites affecting www.lahitapiola.fi. The reporter used publicly available information for finding out information relevant to performing the research. Default installation paths, URL's and privileged usernam...

LocalTapiola: Oracle WebCenter Sites Support Tools available and Information disclosure (/cs/Satellite)

Oracle WebCenter Sites Support Tools are available in: www.lahitapiola.fi This software is password protected, but some pages are publicly available and reveal internal information. The welcome page is located at: http://www.lahitapiola.fi/henkilo?pagename=Support/Home This page reveal data as th...

LocalTapiola: Reflected XSS in www.lahitapiola.fi (/cs/Satellite) using Oracle WebCenter -page

There is possible to include HTML/Javascript code in the parameter "destpage" of one of the Fatwire pages. The affected Fatwire page is: OpenMarket/Xcelerate/UIFramework/LoginError This allows to launch a reflected XSS attack by creating a simple URL like the following:...

CVE-2016-3502

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3502

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3502

CVE-2016-3502 concerns an unspecified vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware versions 11.1.1.8 and 12.2.1.0 . The description indicates that remote authenticated users can affect confidentiality, integrity, and availability via unknown vectors, but the e...

CVE-2016-3487

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3487

CVE-2016-3487 affects Oracle Fusion Middleware WebCenter Sites (Oracle WebCenter Sites) 11.1.1.8 and 12.2.1.0. The connected documents specify a vulnerability in the WebCenter Sites component that allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors. ...

Unspecified Vulnerability in Oracle Fusion Middleware WebCenter Sites

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. A security vulnerability exists in Oracle Fusion Middleware versions 11.1.1.8, 12.2.1.0, WebCenter Sites component, which can be exploited by remote attackers to compromise confidentiality, integrity,...

PT-2016-5508

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8, 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. Details about the vectors used for the attack are not specified. Recommendations For versions 11.1.1.8 and 12.2.1.0,...

PT-2016-5522

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 11.1.1.8 through 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote authenticated users via unknown vectors. Recommendations For versions 11.1.1.8...