Cl0Und

A site isolation issue exists within the DOM Web Authentication component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent data leakage.

The issue is due to insufficient input validation in the Core component of Oracle Coherence, allowing an unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks can result in the takeover of Oracle Coherence. This can be exploited by an attacker to execute arbitrary code.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server. The vulnerability can be exploited using network protocols IIOP and T3.

The issue exists due to insufficient input validation in the Coherence Container component of Oracle WebLogic Server, allowing a remote attacker to compromise the server's confidentiality, integrity, and availability via T3 and IIOP protocols. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is caused by insufficient input validation in the Web Listener component of Oracle HTTP Server. This allows a remote attacker to gain read access to data or modify data. Successful attacks require human interaction and can result in unauthorized access to some of the server's data.

The issue is caused by an integer overflow in the `getnum` function, which allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service or possibly bypass intended sandbox restrictions. This can be achieved by providing a large number that triggers a stack-based buffer overflow. The issue exists due to a regression of a previously known problem.