CVSS: 4.4EPSS: 87%CPEs: 2EXPL: 0CVE-2011-2264
https://notcve.org/view.php?id=CVE-2011-2264
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows context-dependent attackers to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the July 2011 CPU. Oracle has not commented on claims from a reliable third party that this is a stack-based buffer overflow in the imcdr2.flt library for the CorelDRAW parser. Una vulnerabilidad no especificada en el componente Oracle Outside In Technology en Fusion Middleware de Oracle versiones 8.3.2.0 y 8.3.5.0, permite que los atacantes dependiendo del contexto afectar la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos relacionados con Outside In Filters. NOTA: la información anterior fue obtenida de la CPU de julio de 2011. • http://www-01.ibm.com/support/docview.wss?uid=swg21660640 http://www.kb.cert.org/vuls/id/103425 http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html http://www.us-cert.gov/cas/techalerts/TA11-201A.html •
CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0CVE-2011-0794
https://notcve.org/view.php?id=CVE-2011-0794
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5.0 allows local users to affect confidentiality, integrity, and availability, related to File ID SDK. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (a) sccut.dll or (b) libsc_ut.so in Outside In 8.3.5.x through 8.3.5.5684, as used when using the CAB file identification functionality to parse OneNote (.onepkg) files and other formats. Vulnerabilidad no especificada en el componente Oracle Outside In Technology en Oracle Fusion Middleware 8.3.5.0 permite a usuarios locales afectar a la confidencialidad, integridad y disponibilidad, relacionado con File ID SDK. NOTA: la información anterior fue obtenida de la CPU de Abril de 2011. • http://secunia.com/advisories/44295 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-csa http://www-01.ibm.com/support/docview.wss?uid=swg21660640 http://www.kb.cert.org/vuls/id/520721 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=7009213&sliceId=1&docTypeID=DT_TID_1_1&dialogID=268451045&stateId=0%200%20268449309 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html http://www.securityfocus.com/bid/47437 •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2011-0808
https://notcve.org/view.php?id=CVE-2011-0808
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.2.0 and 8.3.5.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Outside In Filters. NOTE: the previous information was obtained from the April 2011 CPU. Oracle has not commented on claims from a reliable third party that this issue is in (a) vswk6.dll or (b) libvs_wk6.so in Outside In 8.1.0.4037 through 8.3.5.5684, involving the Lotus 123 parser. Vulnerabilidad no especificada en el componente Oracle Outside In Technology en Oracle Fusion Middleware 8.3.2.0 y 8.3.5.0 permite a usuarios locales afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Outside In Filters. NOTA: la información anterior fue obtenida de la CPU de Abril de 2011. • http://secunia.com/advisories/44295 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111026-csa http://www-01.ibm.com/support/docview.wss?uid=swg21660640 http://www.kb.cert.org/vuls/id/520721 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=7009213&sliceId=1&docTypeID=DT_TID_1_1&dialogID=268451045&stateId=0%200%20268449309 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html http://www.securityfocus.com/bid/47435 •
CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0CVE-2010-4453
https://notcve.org/view.php?id=CVE-2010-4453
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container. Vulnerabilidad no especificada en el componente Oracle WebLogic Server para Oracle Fusion Middleware v7.0.7, v8.1.6, v9.0, v9.1, v9.2.4, v10.0.2, v10.3.2, y v10.3.3 permite a atacantes remotos afectar a la integridad a través de vectores desconocidos relacionados Servlet Container. • http://osvdb.org/70584 http://secunia.com/advisories/42975 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html http://www.securityfocus.com/bid/45877 http://www.securitytracker.com/id?1024981 http://www.vupen.com/english/advisories/2011/0143 https://exchange.xforce.ibmcloud.com/vulnerabilities/64766 •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 1CVE-2010-2370 – Oracle Business Process Management 10.3.2 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2010-2370
Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM. Vulnerabilidad no especificada en el componente Oracle Business Process Management de Oracle Fusion Middleware v5.7 MP3, v6.0 MP5, y v10.3 MP2, permite a atacantes remotos afectar la integridad, relacionado con BPM. • https://www.exploit-db.com/exploits/34310 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •