PT-2013-3238

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 through 11.1.1.6.0 Description The issue allows remote authenticated users to affect availability via unknown vectors related to Content Server. It is also related to a remote code execution...

PT-2013-3185

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 through 11.1.1.6.0 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Content Server. Recommendations For...

PT-2013-3191

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Sites versions 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to WebCenter Sites. Recommendations For...

Oracle WebCenter / Fatwire Header Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server product: Oracle WebCenter Sites Satellite Server former FatWire Satellite Server vulnerab...

CVE-2013-1509: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites...

CVE-2013-1529: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Interaction component in Oracle Fusion Middleware 6.5.1 and 10.3.3.0 allows remote attackers to affect integrity via unknown vectors related to Image Service...

PT-2013-3211

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Interaction versions 6.5.1 and 10.3.3.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Image Service in the Oracle WebCenter Interaction...

CVE-2013-1559: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect availability via unknown vectors related to Content Server...

PT-2013-1665

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 11.1.1.6.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Content Server. Recommendations For Oracle WebCenter Content version...

CVE-2013-1503: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Content Server...

PT-2013-3204

Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content versions 10.1.3.5.1 and 11.1.1.6.0 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to Content Server. Recommendations For version 10.1.3.5....

CVE-2013-1522: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

CVE-2013-1516: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Capture component in Oracle Fusion Middleware 10.1.3.5.1 allows remote authenticated users to affect availability via unknown vectors related to Import Server...

PT-2013-3198

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware version 10.1.3.5.1 Description The issue affects the availability of the system, allowing remote authenticated users to exploit it via unknown vectors related to the Import Server in the Oracle WebCenter Capture...

CVE-2012-4303: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 11.1.1.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Content Server...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

This module exploits a vulnerability found in the Oracle WebCenter Content CheckOutAndOpenControl ActiveX. This vulnerability exists in openWebdav, where user controlled input is used to call ShellExecuteExW. This module abuses the control to execute an arbitrary HTA from a remote location. This...

SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server)

SEC Consult Vulnerability Lab Security Advisory 20121017-2 ======================================================================= title: Multiple vulnerabilities in Oracle WebCenter Sites product: Oracle WebCenter Sites former FatWire Content Server vulnerable version: 6.1, 6.2, 6.3.x, 7, 7.0.1,...

CVE-2012-5065

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...

CVE-2012-5065

Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 6.1, 6.2, 6.3.x, 7, 7.0.1, 7.0.2, 7.0.3, 7.5, 7.6.1, 7.6.2, and 11.1.1.6.0 allows local users to affect integrity via unknown vectors related to ImagePicker...