Blue0

O problema está relacionado à validação insuficiente de entradas no componente Cloning do produto Oracle Global Lifecycle Management FMW Installer. Isso permite que um invasor não autenticado com acesso à rede via SFTP comprometa o Oracle Global Lifecycle Management FMW Installer. Ataques bem-sucedidos podem resultar em acesso não autorizado para criação, exclusão ou modificação de dados críticos ou de todos os dados acessíveis.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIOP to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. It is estimated that over 10,000 services are potentially affected.

The issue is related to errors in handling input data in the Oracle WebLogic Server Core component. This can be exploited by a remote attacker to execute arbitrary code by injecting specially crafted messages via T3 and IIOP protocols. Successful attacks can result in the takeover of the Oracle WebLogic Server.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIOP protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server, impacting confidentiality, integrity, and availability.

The issue is related to the incorrect management of code generation in the Metabase platform, which could allow remote code execution on the server. The core problem is that the embedded in-memory database H2 exposes ways for a connection string to include code that is then executed by the process running the embedded database. This means a user-supplied string can be used to inject executable code. The validation API, which can be called without validation, is the primary vector used for exploitation. Approximately 58,710 results are potentially affected.

The issue is related to errors in processing input data in the Oracle WebLogic Server component of Oracle Fusion Middleware. Exploitation of this issue can allow a remote attacker to cause a denial of service. A successful attack can result in the unauthorized ability to cause the server to hang or crash repeatedly, leading to a complete denial of service.

The issue is related to errors in handling input data in the Core component of the Oracle WebLogic Server. It allows an unauthenticated attacker with network access via T3 to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.