Oracle HTTP Server vulnerabilities

Vulnerability in Oracle HTTP Server (OSSL Module component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can create, delete, or modify critical data and gain full access to it, with potential impact on additional products.

Vulnerability in Oracle HTTP Server (component: mod_ssl) allows unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. CVSS 9.1.

Vulnerability in Oracle HTTP Server (component: Apache Plugin). Unauthenticated attacker via network (HTTP) can take over the server.

Vulnerability in Oracle HTTP Server (Web Listener component) version 12.2.1.4.0. A low-privileged attacker with local access can take over the server. CVSS 7.8.

Vulnerability in Oracle HTTP Server (component: OSSL Module) affecting version 12.2.1.4.0. A low-privileged attacker with logon access to the infrastructure where Oracle HTTP Server executes can take over the server.

Vulnerability in Oracle HTTP Server (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical data and access to it.

Vulnerability in Oracle HTTP Server (component mod_http2.so). A low-privileged attacker with local access can take over the HTTP server.

Vulnerability in Oracle HTTP Server (Core component) allows a low-privileged attacker with local access to easily take over the server.

Vulnerability in Oracle HTTP Server (component: mod_proxy) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can gain full access to critical data, also impacting other products.