Oracle WebCenter Content vulnerabilities

Vulnerability in the Content Server component of Oracle WebCenter Content version 14.1.2.0.0. A difficult-to-exploit HTTP attack requiring user interaction can lead to unauthorized access to critical data and modification of some data, and due to scope change may impact additional products.

Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and can lead to unauthorized access to critical data.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can take over Oracle WebCenter Content. CVSS 9.8.

Vulnerability in Oracle WebCenter Content (Content Server component) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by unauthenticated attacker with network access via HTTP, requiring user interaction. Allows unauthorized modification, full data access, and partial denial of service. CVSS score 9.6.

Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by a low privileged attacker with network access via HTTP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.

Vulnerability in Oracle WebCenter Content (component: Web Content Management). Affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker via HTTP can access and modify critical data.

Vulnerability in Oracle WebCenter Content (Web Content Management component) allows unauthenticated attacker via HTTP to take over the system, with impact on other products (scope change). CVSS 10.0.

Vulnerability in Oracle WebCenter Content (Content Server component) allows an unauthenticated attacker via HTTP to unauthorized create, delete, or modify critical data and gain full access to it. User interaction is required, and the attack may impact additional products.

Vulnerability in Oracle WebCenter Content (Oracle Fusion Middleware) in the Content Server component. Affects versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires human interaction. May impact additional products (scope change). Can lead to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.3.

Vulnerability in Oracle WebCenter Content (Content Server component) allows unauthenticated attacker via HTTP to take over the system. CVSS 9.8.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to take over Oracle WebCenter Content. Affects versions 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Successful attacks require human interaction and may significantly impact additional products.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server) allows easy exploitation by an unauthenticated attacker with network access via HTTP. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of critical data.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may significantly impact additional products.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

A vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. This difficult-to-exploit vulnerability may significantly impact additional products.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Affected versions are 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content. It affects versions 12.2.1.4.0 and 14.1.2.0.0.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise Oracle WebCenter Content. Attacks may also significantly impact additional products.

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite), affecting versions 12.2.1.4.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with HTTP network access to take over Oracle WebCenter Content.

Vulnerability in Oracle WebCenter Content (Content Server component) version 14.1.2.0.0 allows an unauthenticated network attacker via HTTP to perform unauthorized update, insert, or delete and read a subset of data. It requires human interaction.

Vulnerability in Oracle WebCenter Content of Oracle Fusion Middleware (component: Content Server). Affects version 14.1.2.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to a subset of data.

Vulnerability in Oracle WebCenter Content (Content Server component) version 14.1.2.0.0, difficult to exploit, allows a low-privileged network attacker via HTTP to gain unauthorized access to critical data and modify a subset of data; requires human interaction and may impact additional products (scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting version 14.1.2.0.0. A low-privileged attacker with HTTP network access can, with user interaction, gain unauthorized creation, deletion or modification of critical data and read access to a subset of data.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can, with user interaction, gain unauthorized update, insert or delete access to data and cause a partial DoS.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged authenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with HTTP network access can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to update, insert or delete it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker able to log on to the infrastructure hosting WebCenter Content can easily exploit the flaw to gain unauthorized access to critical data; the attack may impact additional products (scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with access to the physical communication segment attached to the hardware running WebCenter Content can, with difficulty, exploit the flaw to gain unauthorized access to critical data and to create, delete or modify it.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with HTTP network access can, with difficulty and requiring user interaction, exploit the flaw; the attack may impact additional products (scope change) and result in unauthorized access to critical data and its update, insert or delete.

A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows a low-privileged attacker with network access via HTTP to cause a hang or frequently repeatable crash (full DoS). CVSS 3.1 Base Score 6.5 (availability impact).

A vulnerability in Oracle WebCenter Content (Content Server component) in version 12.2.1.4.0 allows a low-privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete access to some WebCenter Content accessible data. CVSS 3.1 Base Score 4.3 (integrity impact).

A vulnerability in Oracle WebCenter Content (Content Server component) in versions 12.2.1.4.0 and 14.1.2.0.0 allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data, requiring human interaction. CVSS 3.1 Base Score 5.3 (confidentiality impact).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can modify and read some data, potentially impacting other products (scope change).

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data or all data accessible in the product.

Vulnerability in Oracle WebCenter Content (Content Server component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An easily exploitable flaw allows a low-privileged attacker with logon to the infrastructure where Oracle WebCenter Content executes to compromise it.

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can compromise the system, but requires user interaction. Successful attacks may result in unauthorized modification, read access to a subset of data, and partial denial of service.

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with local access can gain complete access to critical data, with potential impact on other products.

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can fully compromise the system. CVSS score is 7.8.

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP, under difficult exploitation conditions and requiring user interaction, can compromise the system. CVSS score is 7.1.

Vulnerability in Oracle WebCenter Content (component: Content Server) affects versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP, requiring user interaction, can gain unauthorized access to critical data and perform unauthorized modifications. CVSS score is 7.1.

Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, allowing unauthorized access to critical data or complete access to all WebCenter Content data. May impact other products (scope change). CVSS 7.7.

Vulnerability in Oracle WebCenter Content (component: Content Server) in versions 14.1.2.0.0 and 12.2.1.4.0. Easily exploitable by a low-privileged attacker over HTTP, requiring user interaction. Allows unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 8.7.

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, requires physical access to network segment, allows unauthorized access and data modification, with potential impact on other products.

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable, allows high-privileged attacker via HTTP to modify data, partially read data and cause partial denial of service, with potential impact on other products.

Vulnerability in Oracle WebCenter Content (component: Content Server) versions 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit, allows unauthenticated attacker via HTTP to compromise confidentiality and integrity, with potential impact on other products.