PT-2014-1718

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Description The issue allows remote attackers to compromise data integrity using WLS - Web Services. It affects the Oracle WebLogic Server component in Oracle Fusion Middleware,...

PT-2014-1724

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via vectors...

PT-2014-1723

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning WLS - Web...

Oracle Weblogic Server 10.3 'console-help.portal' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35673/info Oracle WebLogic Server is prone to a cross-site scripting vulnerability. An attacker with 'WLS Console Package' privileges can exploit this issue. The attacker may leverage this issue to execute arbitrary scrip...

CVE-2014-2470

CVE-2014-2470 is described in IBM OpenPages with Application Server security bulletin as an unspecified vulnerability in Oracle WebLogic Server related to the WLS Security component, affecting IBM OpenPages with Application Server 6.0–7.0. The IBM advisory associates the vulnerability with CVE-20...

CVE-2014-2470

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security...

CVE-2014-2470: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security...

PT-2014-1715

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.2.0 Description The issue affects the confidentiality, integrity, and availability of data. It is related to the WLS Security...

Oracle Fusion WebLogic Server Component WLS-Console Management Interface Unspecified XSS

The version of the WebLogic component on Oracle Middleware installed on the remote Windows host is affected an unspecified cross-site scripting vulnerability related to WLS-Console. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

CVE-2012-0077

CVE-2012-0077 affects Oracle WebLogic Server in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5, related to the WLS-Console. Multiple connected sources confirm a cross-site scripting vulnerability in the WebLogic management console, enabling an arbitrary script to execute in th...

PT-2012-2281

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4, 10.0.2, 10.3.3, 10.3.4, 10.3.5 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it. It is related to the WLS-Console component. Recommendations For...

CVE-2012-0077: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

CVE-2011-2318

CVE-2011-2318 refers to an unspecified vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware versions 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 that allows local users to affect confidentiality (related to WLS Security). The description does not provide detai...

CVE-2011-2318

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...

PT-2011-3770

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 9.2.4.0 through 10.3.5.0 Description The issue affects confidentiality and is related to WLS Security, allowing local users to exploit it. Recommendations For versions 9.2.4.0 through 10.3.5.0, at the moment,...

CVE-2011-2318: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows local users to affect confidentiality, related to WLS Security...