Oracle Fusion Middleware vulnerabilities

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security) affecting versions 4.0.0-4.5.5. An unauthenticated attacker with network access via HTTP can easily exploit it to gain unauthorized creation, deletion, or modification access to critical data.

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (T3, IIOP) can take over the platform.

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (T3, IIOP) can take over the platform.

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (HTTP) can take over the platform.

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). Unauthenticated attacker via network (T3, IIOP) can take over the platform.

Vulnerability in Oracle WebCenter Enterprise Capture product (Oracle Fusion Middleware) in Client Bundle component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle WebCenter Enterprise Capture product (Oracle Fusion Middleware) in Client Bundle component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires low privileges and user interaction, but may affect other products. Allows unauthorized access and modification of critical data.

Vulnerability in Oracle WebCenter Content (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the system.

Vulnerability in Oracle WebCenter Portal (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can take over the portal.

Vulnerability in Oracle WebCenter Sites (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to gain unauthorized access and modification of critical data, with possible impact on other products.

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via T3 or IIOP can easily exploit this, leading to full system takeover.

Vulnerability in WebCenter Content: Imaging product of Oracle Fusion Middleware, component Core. Affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over WebCenter Content: Imaging. Attacks may significantly impact additional products (scope change).

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging product (Core component). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires network access via HTTP and user interaction. Successful attack can lead to takeover of WebCenter Content: Imaging.

Vulnerability in Oracle Fusion Middleware WebCenter Content: Imaging (Core component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via HTTP can easily exploit this, leading to full system takeover.

Vulnerability in Oracle Fusion Middleware Service Delivery Platform (component: Messaging Enabler). A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or full access to all platform data.

Vulnerability in Oracle Fusion Middleware Oracle Unified Directory product (OUD Core component). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by authenticated high-privileged attacker via LDAP. Can lead to unauthorized data modification and complete denial of service (DOS).

Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows an unauthenticated attacker via LDAP to gain unauthorized access to critical data and modify it.

Vulnerability in Oracle Unified Directory (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker via LDAP to gain unauthorized access and modification of critical data, with possible impact on other products.

Vulnerability in Oracle JDeveloper of Oracle Fusion Middleware (component: Java Business Objects). Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to JDeveloper data and cause a partial denial of service (partial DOS).

Vulnerability in Oracle Fusion Middleware Oracle JDeveloper (ADF Shared Components component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via HTTP can easily exploit this, leading to full system takeover.

Vulnerability in Oracle Fusion Middleware Oracle Access Manager product (Authentication Engine component). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by unauthenticated attacker via HTTP. Can lead to unauthorized access to all Oracle Access Manager data.

Vulnerability in Oracle Access Manager product of Oracle Fusion Middleware, component Authentication Engine. Affects versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with access to the physical communication segment to take over Oracle Access Manager.

Vulnerability in Oracle Identity Manager (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows an attacker with low privileges via HTTP to gain unauthorized access and modification of critical data.

Vulnerability in Oracle Coherence of Oracle Fusion Middleware (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a complete denial of service (complete DOS).

An easily exploitable vulnerability exists in Oracle Fusion Middleware (Dynamic Monitoring Service component) in versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can compromise the system, requiring user interaction; the attack may impact additional products (scope change).