Oracle

Webcenter Sites

99 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2019-0228

  • EPSS 9.45%
  • Veröffentlicht 17.04.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:16:32

Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.

7.5

CVE-2018-15756

  • EPSS 9.51%
  • Veröffentlicht 18.10.2018 22:29:00
  • Zuletzt bearbeitet 25.08.2026 16:28:27

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler,...

6.9

CVE-2018-3238

  • EPSS 4.58%
  • Veröffentlicht 17.10.2018 01:31:25
  • Zuletzt bearbeitet 21.11.2024 04:05:30

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access ...

8.2

CVE-2018-2791

  • EPSS 39.45%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 21.11.2024 04:04:27

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated att...

6.1

CVE-2015-9251

  • EPSS 29.73%
  • Veröffentlicht 18.01.2018 23:29:00
  • Zuletzt bearbeitet 21.11.2024 02:40:09

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

4.3

CVE-2018-2584

  • EPSS 1.09%
  • Veröffentlicht 18.01.2018 02:29:18
  • Zuletzt bearbeitet 21.11.2024 04:03:59

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

4

CVE-2017-10033

  • EPSS 2.33%
  • Veröffentlicht 19.10.2017 17:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker wi...

8.1

CVE-2017-12617

Warnung Exploit
  • EPSS 99.99%
  • Veröffentlicht 04.10.2017 01:29:02
  • Zuletzt bearbeitet 25.08.2026 16:28:27

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload ...

3.5

CVE-2017-3603

  • EPSS 1.05%
  • Veröffentlicht 24.04.2017 19:59:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low p...

8.5

CVE-2017-3602

  • EPSS 1.96%
  • Veröffentlicht 24.04.2017 19:59:06
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low p...