Vendor Dictionary: Oracle Corporation

Oracle Corporation

Short Name:	Oracle
Previous Names:	PeopleSoft, BEA Systems Inc, Siebel
URL:	http://www.oracle.com/ [visit link]
Email:	[None Entered]
Security URL:	http://www.oracle.com/technology/deploy/security/alerts.htm [visit link]
Security Email:	secalert_usoracle.com
Knowledge Base:	[None Entered]
Notes:	Web form contact listing: http://www.oracle.com/corporate/contact/global.html

Vulnerabilities by Vendor Product

Oracle Corporation

« Previous 1 2 3 4 5 6 7 8 9 10 11 12 … 27 28 Next »

Oracle Corporation

Health Sciences - Oracle Argus Safety: 5.0; 5.0.1; 5.0.2; 5.0.3

HTML DB: 1.3.6; OSVDB ID: 20051 Oracle HTMLDB f p Parameter XSS; OSVDB ID: 20052 Oracle HTMLDB wwv_flow.accept p_t02 Parameter XSS; 1.4.4.00.33; OSVDB ID: 20051 Oracle HTMLDB f p Parameter XSS; OSVDB ID: 20052 Oracle HTMLDB wwv_flow.accept p_t02 Parameter XSS

GlassFish Enterprise Server: 2.1.1; OSVDB ID: 78414 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Information Disclosure; OSVDB ID: 78417 Oracle GlassFish Enterprise Server Web Container Component Unspecified Remote DoS; OSVDB ID: 78415 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Issue; 3.0.1; OSVDB ID: 78414 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Information Disclosure; OSVDB ID: 78417 Oracle GlassFish Enterprise Server Web Container Component Unspecified Remote DoS; OSVDB ID: 78415 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Issue; 3.1.1; OSVDB ID: 78414 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Information Disclosure; OSVDB ID: 78417 Oracle GlassFish Enterprise Server Web Container Component Unspecified Remote DoS; OSVDB ID: 78415 Oracle GlassFish Enterprise Server Administration Component Unspecified Local Issue; 2.1.1; 3.0.1; 3.1.1; 2.1.1; 3.0.1; 3.1.1; 3.1.1 (build 12); OSVDB ID: 81250 Oracle GlassFish Enterprise Server common/appServer/pswdAliasNew.jsf aliasNameNew Parameter XSS; OSVDB ID: 81227 Oracle GlassFish Enterprise Server /management/domain/create-password-alias id Parameter XSS; OSVDB ID: 81226 Oracle GlassFish Enterprise Server /common/applications/lifecycleEdit.jsf appName Parameter XSS; OSVDB ID: 81228 Oracle GlassFish Enterprise Server /common/security/realms/realms.jsf configName Parameter XSS; OSVDB ID: 81229 Oracle GlassFish Enterprise Server /web/grizzly/networkListeners.jsf configName Parameter XSS; OSVDB ID: 81230 Oracle GlassFish Enterprise Server /common/security/auditModules/auditModules.jsf configName Parameter XSS; OSVDB ID: 81232 Oracle GlassFish Enterprise Server /common/security/msgSecurity/msgSecurity.jsf configName Parameter XSS; OSVDB ID: 81233 Oracle GlassFish Enterprise Server /jms/jmsHosts.jsf configName Parameter XSS; OSVDB ID: 81234 Oracle GlassFish Enterprise Server /web/grizzly/networkListeners.jsf configName Parameter XSS; OSVDB ID: 81235 Oracle GlassFish Enterprise Server /web/grizzly/protocols.jsf configName Parameter XSS; OSVDB ID: 81236 Oracle GlassFish Enterprise Server /web/grizzly/transports.jsf configName Parameter XSS; OSVDB ID: 81237 Oracle GlassFish Enterprise Server /xhp key Parameter XSS; OSVDB ID: 81231 Oracle GlassFish Enterprise Server /common/security/jacc/jaccProviders.jsf configName Parameter XSS; OSVDB ID: 81225 Oracle GlassFish Enterprise Server WAR Archive Uploading CSRF; 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12); 3.1.1 (build 12)

HTTP Server: 10.1.2.0.2

Grid Engine: 6.1; OSVDB ID: 81396 Oracle Grid Engine sgepasswd -d Option Local Overflow; OSVDB ID: 81395 Oracle Grid Engine Unspecified Remote Code Execution; 6.2; OSVDB ID: 81396 Oracle Grid Engine sgepasswd -d Option Local Overflow; OSVDB ID: 81395 Oracle Grid Engine Unspecified Remote Code Execution

GoldenGate Veridata: 3.0.0.11.0; 3.0.0.11.0; OSVDB ID: 89189 Oracle GoldenGate Multiple Component Server Subcomponent Unspecified Remote DoS; 3.0.0.11; OSVDB ID: 92373 Oracle GoldenGate Veridata Unspecified Remote DoS

Forms and Reports: 4.5.10.22; OSVDB ID: 18031 Oracle Application Server Forms Local Unspecified Integrity Issue; OSVDB ID: 18032 Oracle Application Server Forms Unspecified Local Information Disclosure; OSVDB ID: 18033 Oracle Application Server Forms HTTP Unspecified Trivial Remote DoS; OSVDB ID: 18034 Oracle Application Server Forms Temporary File Cleartext Password Disclosure; OSVDB ID: 18246 Oracle Application Server Forms 'buffered records' Temp File Information Disclosure; 6.0.8.25; OSVDB ID: 18031 Oracle Application Server Forms Local Unspecified Integrity Issue; OSVDB ID: 18032 Oracle Application Server Forms Unspecified Local Information Disclosure; OSVDB ID: 18033 Oracle Application Server Forms HTTP Unspecified Trivial Remote DoS; OSVDB ID: 18034 Oracle Application Server Forms Temporary File Cleartext Password Disclosure; OSVDB ID: 18246 Oracle Application Server Forms 'buffered records' Temp File Information Disclosure; 11.1.2.0; OSVDB ID: 86394 Oracle Forms and Reports Developer Component Servlet Subcomponent Unspecified Remote Issue; 11.1.1.4; OSVDB ID: 86394 Oracle Forms and Reports Developer Component Servlet Subcomponent Unspecified Remote Issue; 11.1.1.4; OSVDB ID: 86395 Oracle Forms and Reports Developer Component Report Server Component Subcomponent Unspecified Remote Issue; 11.1.2.0; OSVDB ID: 86395 Oracle Forms and Reports Developer Component Report Server Component Subcomponent Unspecified Remote Issue

GlassFish Server: 3.0.1; 3.1.2; 3.0.1; OSVDB ID: 86388 Oracle GlassFish / Java System Application Server CORBA ORB Subcomponent Unspecified Remote DoS; 3.1.2; OSVDB ID: 86388 Oracle GlassFish / Java System Application Server CORBA ORB Subcomponent Unspecified Remote DoS; 3.1.2; OSVDB ID: 92460 Oracle GlassFish Server ADMIN Interface Subcomponent Unspecified Remote Issue; 3.0.1; OSVDB ID: 92460 Oracle GlassFish Server ADMIN Interface Subcomponent Unspecified Remote Issue; 3.1.2; OSVDB ID: 92461 Oracle GlassFish Server REST Interface Subcomponent Unspecified Remote Issue; 3.0.1; OSVDB ID: 92461 Oracle GlassFish Server REST Interface Subcomponent Unspecified Remote Issue

Fusion Middleware: 5.7 MP3; OSVDB ID: 66354 Oracle Fusion Middleware Business Process Management Component Unspecified Remote Issue (2010-2370); 6.0 MP5; OSVDB ID: 66354 Oracle Fusion Middleware Business Process Management Component Unspecified Remote Issue (2010-2370); 10.3 MP2; OSVDB ID: 66354 Oracle Fusion Middleware Business Process Management Component Unspecified Remote Issue (2010-2370); 10.1.3.4; OSVDB ID: 70544 Oracle Fusion Middleware Document Capture Import Export Utility Unspecified Remote Issue; OSVDB ID: 70538 Oracle Fusion Middleware Document Capture Internal Operations Unspecified Remote Issue (2010-3592); OSVDB ID: 70545 Oracle Fusion Middleware Document Capture Import Server NCSECWLib ActiveX WriteJPG Function Arbitrary File Overwrite; OSVDB ID: 70541 Oracle Fusion Middleware Document Capture Import Server EasyMail ActiveX (emsmtp.dll) ImportBodyText Method Arbitrary File Access; OSVDB ID: 70537 Oracle Fusion Middleware Document Capture ActiveBar2Library ActiveX (Actbar2.ocx) SaveLayoutChanges Method Arbitrary File Overwrite; 10.1.3.5; OSVDB ID: 70544 Oracle Fusion Middleware Document Capture Import Export Utility Unspecified Remote Issue; OSVDB ID: 70538 Oracle Fusion Middleware Document Capture Internal Operations Unspecified Remote Issue (2010-3592); OSVDB ID: 70059 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2410); OSVDB ID: 70060 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2409); OSVDB ID: 70062 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2395); OSVDB ID: 70545 Oracle Fusion Middleware Document Capture Import Server NCSECWLib ActiveX WriteJPG Function Arbitrary File Overwrite; OSVDB ID: 70541 Oracle Fusion Middleware Document Capture Import Server EasyMail ActiveX (emsmtp.dll) ImportBodyText Method Arbitrary File Access; OSVDB ID: 70537 Oracle Fusion Middleware Document Capture ActiveBar2Library ActiveX (Actbar2.ocx) SaveLayoutChanges Method Arbitrary File Overwrite; 8.3.0; OSVDB ID: 70543 Oracle Fusion Middleware Outside In Technology Outside In Viewer SDK Unspecified Remote DoS; 10.1.2.3; OSVDB ID: 70534 Oracle Fusion Middleware Discoverer EUL Code & Schema Unspecified Remote Issue; OSVDB ID: 70057 Oracle Fusion Middleware OID Unspecified Remote DoS; OSVDB ID: 70059 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2410); OSVDB ID: 70060 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2409); OSVDB ID: 70061 Oracle Fusion Middleware Forms Unspecified Remote Issue; OSVDB ID: 70062 Oracle Fusion Middleware Cabo/UIX Unspecified Remote Issue (2010-2395); OSVDB ID: 70063 Oracle Multiple Products EM Console HTTP Request Handling Remote Overflow; 11.1.1.2.0; OSVDB ID: 70534 Oracle Fusion Middleware Discoverer EUL Code & Schema Unspecified Remote Issue; OSVDB ID: 70056 Oracle Fusion Middleware BPEL Console BPELCONSOLE/DEFAULT/processLog.jsp processName Parameter XSS; OSVDB ID: 70064 Oracle Fusion Middleware Perl Unspecified Local Issue; OSVDB ID: 70064 Oracle Fusion Middleware Perl Unspecified Local Issue; 11.1.1.3.0; OSVDB ID: 70534 Oracle Fusion Middleware Discoverer EUL Code & Schema Unspecified Remote Issue; 7.0.7; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); 8.1.6; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); 9.0; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); 9.1; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 9.2.3; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; 10.0.2; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 10.3.2; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 10.3.3; OSVDB ID: 70531 Oracle Fusion Middleware WebLogic Server Node Manager Unspecified Issue; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 2.0.1.0; OSVDB ID: 70552 Oracle Fusion Middleware Services for Beehive voice-servlet/prompt-qa/Index.jspf Filename Null Byte Remote Code Execution; 2.0.1.1; OSVDB ID: 70552 Oracle Fusion Middleware Services for Beehive voice-servlet/prompt-qa/Index.jspf Filename Null Byte Remote Code Execution; 2.0.1.2; OSVDB ID: 70552 Oracle Fusion Middleware Services for Beehive voice-servlet/prompt-qa/Index.jspf Filename Null Byte Remote Code Execution; 2.0.1.2.1; OSVDB ID: 70552 Oracle Fusion Middleware Services for Beehive voice-servlet/prompt-qa/Index.jspf Filename Null Byte Remote Code Execution; 2.0.1.3; OSVDB ID: 70552 Oracle Fusion Middleware Services for Beehive voice-servlet/prompt-qa/Index.jspf Filename Null Byte Remote Code Execution; 10.1.3.3.2; OSVDB ID: 70559 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4425); OSVDB ID: 70058 Oracle Fusion Middleware BI Publisher Unspecified Response Splitting; 10.1.3.4.0; OSVDB ID: 70559 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4425); 10.1.3.4.1; OSVDB ID: 70559 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4425); OSVDB ID: 70561 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4427); OSVDB ID: 70058 Oracle Fusion Middleware BI Publisher Unspecified Response Splitting; 11.1.1.3; OSVDB ID: 70559 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4425); 10.1.3.4.0; OSVDB ID: 70561 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4427); 11.1.1.3; OSVDB ID: 70561 Oracle Fusion Middleware BI Publisher Web Server Unspecified Remote Issue (2010-4427); OSVDB ID: 70585 Oracle Fusion Middleware Oracle HTTP Server Apache Plugin Unspecified Remote Issue; OSVDB ID: 78404 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter XSS; OSVDB ID: 78403 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter SQL Injection; 9.0; OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 9.2.4; OSVDB ID: 70584 Oracle Fusion Middleware WebLogic Server Servlet Container Unspecified Remote Issue (2010-4453); OSVDB ID: 70571 Oracle Fusion Middleware WebLogic Server Servlet Container AFSSESSIONID Cookie Session Fixation; 11.1.1.2; OSVDB ID: 70585 Oracle Fusion Middleware Oracle HTTP Server Apache Plugin Unspecified Remote Issue; 11.1.1.1.0; OSVDB ID: 70056 Oracle Fusion Middleware BPEL Console BPELCONSOLE/DEFAULT/processLog.jsp processName Parameter XSS; OSVDB ID: 70064 Oracle Fusion Middleware Perl Unspecified Local Issue; OSVDB ID: 70064 Oracle Fusion Middleware Perl Unspecified Local Issue; 10.1.4.3; OSVDB ID: 70057 Oracle Fusion Middleware OID Unspecified Remote DoS; OSVDB ID: 70063 Oracle Multiple Products EM Console HTTP Request Handling Remote Overflow; 11.1.1.2; OSVDB ID: 70057 Oracle Fusion Middleware OID Unspecified Remote DoS; 8.1.6; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 9.2.3; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 9.2.4; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 10.0.2; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 10.3.2; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 10.3.3; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 10.3.4; OSVDB ID: 71961 Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection; Unspecified; OSVDB ID: 71952 Oracle Multiple Products Oracle Help help/topics/iastop_cs/iastop_cs_farm_page.html locale Parameter XSS; 8.1.6; 9.2.3; 9.2.4; 10.0.2; 10.3.2; 10.3.3; 10.3.4; 11.1.1.2.0; OSVDB ID: 71951 Oracle Multiple Products Oracle Security Service TLS Renegotiation Handshakes MiTM Plaintext Data Injection; OSVDB ID: 71965 Oracle Multiple Products Midtier Infrastructure Portal Component /portal/pls/ XSS; 11.1.1.3.0; OSVDB ID: 71951 Oracle Multiple Products Oracle Security Service TLS Renegotiation Handshakes MiTM Plaintext Data Injection; 7.5.2; OSVDB ID: 78405 Oracle Fusion Middleware WebCenter Content Component idc/help/user_help/wwhelp/wwhimpl/common/html/frameset.htm URI XSS; OSVDB ID: 78404 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter XSS; OSVDB ID: 78403 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter SQL Injection; 10.1.3.5.1; OSVDB ID: 78405 Oracle Fusion Middleware WebCenter Content Component idc/help/user_help/wwhelp/wwhimpl/common/html/frameset.htm URI XSS; OSVDB ID: 78404 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter XSS; OSVDB ID: 78403 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter SQL Injection; 11.1.1.3; 11.1.1.4; OSVDB ID: 78404 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter XSS; OSVDB ID: 78403 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter SQL Injection; 11.1.1.5; OSVDB ID: 78404 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter XSS; OSVDB ID: 78403 Oracle Fusion Middleware WebCenter Content Component idc/idcplg Multiple Parameter SQL Injection; 7.5.2; 10.1.3.5.1; 11.1.1.3; 11.1.1.4; 11.1.1.5; 7.5.2; 10.1.3.5.1; 11.1.1.3; OSVDB ID: 78428 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote DoS; 11.1.1.4; OSVDB ID: 78428 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote DoS; 11.1.1.5; OSVDB ID: 78428 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote DoS; 11.1.1.3; OSVDB ID: 78429 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Issue; 11.1.1.4; OSVDB ID: 78429 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Issue; 11.1.1.5; OSVDB ID: 78429 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Issue; 11.1.1.3; OSVDB ID: 78430 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Information Disclosure; 11.1.1.4; OSVDB ID: 78430 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Information Disclosure; 11.1.1.5; OSVDB ID: 78430 Oracle Fusion Middleware Web Services Manager Security Component Unspecified Remote Information Disclosure; 3.0.0.4; OSVDB ID: 70551 Oracle Fusion Middleware GoldenGate Veridata Server XML SOAP Request Remote Overflow

Forms: 4.5; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 5.0; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 6.0; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 6i; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 9i; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 10g; OSVDB ID: 18116 Oracle Forms f90servlet module Parameter Arbitrary fmx Execution; OSVDB ID: 18114 Oracle Reports rwservlet report Variable Arbitrary Report Executable Execution; 6i; OSVDB ID: 52625 Oracle Forms cgi60.exe form Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.