CVSS: 4.0EPSS: 24%CPEs: 3EXPL: 1CVE-2013-1509 – Oracle WebCenter Sites Satellite Server - HTTP Header Injection
https://notcve.org/view.php?id=CVE-2013-1509
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 allows remote authenticated users to affect integrity via unknown vectors related to WebCenter Sites. Vulnerabilidad no especificada en el componente Oracle WebCenter Sites en Oracle Fusion Middleware v7.6.2, v11.1.1.6.0, y v11.1.1.6.1 permite a usuarios remotos autenticados afectar la integridad mediante vectores desconocidos relacionados con WebCenter Sites. Oracle WebCenter Sites Satellite Server versions 7.6.0 Patch1, 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 suffer from HTTP header injection and cache poisoning vulnerabilities. • https://www.exploit-db.com/exploits/24964 http://archives.neohapsis.com/archives/bugtraq/2013-04/0189.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html •
CVSS: 4.3EPSS: 0%CPEs: 46EXPL: 0CVE-2012-1677
https://notcve.org/view.php?id=CVE-2012-1677
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware allows remote attackers to affect integrity via unknown vectors. Vulnerabilidad no especificada en el componente Oracle Application Server Single Sign-On en Oracle Fusion Middleware permite a atacantes remotos afectar a la integridad a través de vectores desconocidos. • http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2012-5097
https://notcve.org/view.php?id=CVE-2012-5097
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3.0, 11.1.1.5.0, and 11.1.2.0.0 allows remote attackers to affect integrity, related to OAM Webgate. Vulnerabilidad no especificada en el componente de Oracle Access Manager en Oracle Fusion Middleware v10.1.4.3.0, v11.1.1.5.0, v11.1.2.0.0 que permite a atacantes remotos afectar la integridad, la relacionada con Webgate OAM. • http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html •
CVSS: 6.8EPSS: 28%CPEs: 4EXPL: 0CVE-2013-0418 – Oracle Outside In CorelDRAW File Parsing Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2013-0418
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous information was obtained from the January 2013 CPU. Oracle has not commented on claims from an independent researcher that this is a heap-based buffer overflow in the Paradox database stream filter (vspdx.dll) that can be triggered using a table header with a crafted "number of fields" value. Una vulnerabilidad no especificada en el componente "Oracle Outside In Technology" de Oracle Fusion Middleware v8.3.7 y v8.4 permite afectar a la disponibilidad a atacantes, dependiendo del contexto, a través de vectores desconocidos relacionados con Outside In Filters. Se trata de una vulnerabilidad diferente a CVE-2013-0393. • http://archives.neohapsis.com/archives/bugtraq/2013-01/0073.html http://www-01.ibm.com/support/docview.wss?uid=swg21660640 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html http://www.us-cert.gov/cas/techalerts/TA13-043B.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-012 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16251 •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2013-0393
https://notcve.org/view.php?id=CVE-2013-0393
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0418. Una vulnerabilidad no especificada en el componente Oracle Outside In Technology de Oracle Fusion Middleware v8.3.7 y v8.4 permite afectar a la disponibilidad a atacantes, dependientes de contexto, a través de vectores desconocidos relacionados con Outside In Filters. Se trata de una vulnerabilidad diferente a CVE-2013-0418. • http://www-01.ibm.com/support/docview.wss?uid=swg21660640 http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html http://www.us-cert.gov/cas/techalerts/TA13-043B.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-012 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16202 •