CVE-2018-2561

CVE-2018-2561 affects the Oracle HTTP Server component of Oracle Fusion Middleware (Web Listener). Affected supported versions are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. The vulnerability is exploitable by an unauthenticated, network-accessing attacker over HTTP and can le...

CVE-2016-0671

CVE-2016-0671 affects Oracle Fusion Middleware 12.1.2.0, specifically the Oracle HTTP Server component and its OSSL Module subcomponent. The connected CNVD entry describes a data‑read vulnerability in the OSSL Module of Oracle HTTP Server, enabling remote attackers to compromise data confidential...

CVE-2016-3482

CVE-2016-3482 affects Oracle Fusion Middleware’s Oracle HTTP Server component in 11.1.1.9 and 12.1.3.0. The vulnerability is described as unspecified and enables remote attackers to impact confidentiality via the SSL/TLS Module. The issue is listed in the Oracle July 2016 CPU advisory as a vulner...

CVE-1999-1125

Oracle Webserver 2.1 and earlier runs setuid root; the configuration file is owned by the oracle account. This allows any local or remote attacker with oracle access to gain privileges or modify arbitrary files by altering the configuration file. No remediation details are provided in the supplie...

CVE-2026-34291

CVE-2026-34291 affects the Oracle Fusion Middleware Oracle HTTP Server (Core) with compromised versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability allows an unauthenticated attacker who can reach the server over HTTP to gain access that could lead to unauthorized creation, deletion or modificat...