Vulnerabilities > Oracle > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-10-17 CVE-2018-3245 Deserialization of Untrusted Data vulnerability in Oracle Weblogic Server 10.3.6.0.0/12.1.3.0.0/12.2.1.3.0
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
network
low complexity
oracle CWE-502
critical
9.8
2018-10-17 CVE-2018-3201 Unspecified vulnerability in Oracle Weblogic Server 12.2.1.3.0
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
network
low complexity
oracle
critical
9.8
2018-10-17 CVE-2018-3197 Unspecified vulnerability in Oracle Weblogic Server 12.1.3.0.0
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
network
low complexity
oracle
critical
9.8
2018-10-17 CVE-2018-3191 Unspecified vulnerability in Oracle Weblogic Server 10.3.6.0.0/12.1.3.0.0/12.2.1.3.0
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
network
low complexity
oracle
critical
9.8
2018-10-17 CVE-2018-3183 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting).
network
high complexity
oracle redhat debian canonical hp
critical
9.0
2018-10-17 CVE-2018-2913 Out-of-bounds Write vulnerability in Oracle Goldengate 12.1.2.1.0/12.2.0.2.0/12.3.0.1.0
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager).
network
low complexity
oracle CWE-787
critical
10.0
2018-09-18 CVE-2018-16957 Use of Hard-coded Credentials vulnerability in Oracle Webcenter Interaction 10.3.3
The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password.
network
low complexity
oracle CWE-798
critical
9.8
2018-09-14 CVE-2018-11058 Out-of-bounds Read vulnerability in multiple products
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data.
network
low complexity
dell oracle CWE-125
critical
9.8
2018-08-10 CVE-2018-3110 Unspecified vulnerability in Oracle Database Server
A vulnerability was discovered in the Java VM component of Oracle Database Server.
network
low complexity
oracle
critical
9.9
2018-07-18 CVE-2018-3100 Unspecified vulnerability in Oracle Business Process Management Suite
Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & Discovery).
network
low complexity
oracle
critical
9.1