CVE-2014-6534

CVE-2014-6534 affects Oracle WebLogic Server (Oracle Fusion Middleware) versions 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via vectors related to the WLS Console. The conn...

CVE-2014-4267

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components...

CVE-2014-4255

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Security and Policy...

CVE-2014-4241

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services...

CVE-2014-4256

CVE-2014-4256 concerns an unspecified vulnerability in Oracle WebLogic Server within Oracle Fusion Middleware versions 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 that could affect confidentiality and integrity via vectors related to WLS - Deployment. The connected sources provide no explicit tech...

CVE-2014-4241

CVE-2014-4241 affects Oracle WebLogic Server within Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0. The initial entry describes an unspecified vulnerability that allows remote attackers to affect integrity via vectors related to WLS - Web Services. Connected documents provide context for WebLogic...

CVE-2014-4255

CVE-2014-4255 affects Oracle WebLogic Server (Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0). The vulnerability is described as unspecified and related to WLS - Security and Policy, with partial impacts to confidentiality, integrity, and availability. Connected IBM advisory notes an IBM O...

CVE-2014-4254

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS - Web Services...

CVE-2014-4267

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components...

CVE-2014-4201

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect availability via vectors related to WLS - Web Services...

CVE-2014-4217

CVE-2014-4217 affects Oracle WebLogic Server components under Oracle Fusion Middleware (10.0.2.0, 10.3.6.0, 12.1.1.0). The vulnerability is described as unspecified and related to WLS Web Services, enabling remote integrity impact. No explicit remediation details are provided in the supplied docu...

CVE-2014-4202

CVE-2014-4202 is an unspecified vulnerability in Oracle WebLogic Server, specifically in the WLS Web Services component, that could allow a remote attacker to cause a denial of service. Affected Oracle Fusion Middleware/WebLogic versions include 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0. The ent...

CVE-2014-4201

CVE-2014-4201 is an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware (versions 10.3.6.0, 12.1.1.0, 12.1.2.0) that can remotely affect availability via WLS - Web Services. The connected sources confirm the issue but do not provide concrete exploit details ...

CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services...

Oracle Weblogic Server 10.3 'console-help.portal' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability. An attacker with 'WLS Console Package' privileges can exploit this issue. The attacker may leverage this issue to execute arbitrary scrip...

CVE-2014-2470

CVE-2014-2470 is described in IBM OpenPages with Application Server security bulletin as an unspecified vulnerability in Oracle WebLogic Server related to the WLS Security component, affecting IBM OpenPages with Application Server 6.0–7.0. The IBM advisory associates the vulnerability with CVE-20...

CVE-2014-2470

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security...

Oracle Fusion WebLogic Server Component WLS-Console Management Interface Unspecified XSS

The version of the WebLogic component on Oracle Middleware installed on the remote Windows host is affected an unspecified cross-site scripting vulnerability related to WLS-Console. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...