cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2024-20908,https://securityvulnerability.io/vulnerability/CVE-2024-20908,Vulnerability in Oracle WebCenter Sites Affects Oracle Fusion Middleware,"A vulnerability exists in Oracle WebCenter Sites, a component of Oracle Fusion Middleware, which permits an unauthenticated attacker with network access via HTTP to exploit the system. The vulnerability impacts version 12.2.1.4.0, enabling potential unauthorized updates, inserts, or deletions of data, along with unauthorized read access to certain data. Exploitation requires human interaction from individuals other than the attacker, leading to potentially significant effects on the wider Oracle ecosystem. Organizations are encouraged to evaluate their defenses against this vulnerability to mitigate risks related to data integrity and confidentiality.",Oracle,WebCenter Sites,6.1,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2024-01-16T21:41:13.320Z,0
CVE-2022-21575,https://securityvulnerability.io/vulnerability/CVE-2022-21575,Vulnerability in Oracle WebCenter Sites Support Tools Product of Oracle,"The vulnerability in Oracle WebCenter Sites Support Tools allows attackers with high privileges to exploit HTTP access, compromising sensitive data and gaining unauthorized control over critical operations, including data manipulation and service interruptions. This includes unauthorized updates, inserts, or deletions, raising serious security concerns for users of affected versions.",Oracle,Webcenter Sites,6,MEDIUM,0.00044999999227002263,false,,false,false,false,,,false,false,,2022-07-19T21:08:29.000Z,0
CVE-2020-14613,https://securityvulnerability.io/vulnerability/CVE-2020-14613,Vulnerability in Oracle WebCenter Sites Advanced User Interface Affecting Oracle,"An unauthenticated vulnerability exists in the Advanced User Interface of Oracle WebCenter Sites that allows unauthorized individuals to exploit the system with network access via HTTP. Successful exploitation can lead to unauthorized modifications, deletions, or unauthorized reading of sensitive data, significantly affecting security and confidentiality in Oracle WebCenter Sites. This vulnerability requires interactive participation from users who are not the attackers, emphasizing the need for heightened user awareness and security measures surrounding the affected Oracle products.",Oracle,Webcenter Sites,6.1,MEDIUM,0.0008299999753944576,false,,false,false,false,,,false,false,,2020-07-15T17:34:30.000Z,0
CVE-2020-2739,https://securityvulnerability.io/vulnerability/CVE-2020-2739,Access Vulnerability in Oracle WebCenter Sites by Oracle Fusion Middleware,"A vulnerability exists within Oracle WebCenter Sites that enables an unauthenticated attacker with network access via HTTP to exploit the system. This access could lead to unauthorized data exposure. The vulnerability requires human interaction from a user other than the attacker to be exploited. The repercussions of the exploitation may not be limited to Oracle WebCenter Sites but can also affect other associated Oracle products, potentially resulting in access to critical data.",Oracle,Webcenter Sites,7.4,HIGH,0.0019199999514967203,false,,false,false,false,,,false,false,,2020-04-15T13:29:44.000Z,0
CVE-2020-2538,https://securityvulnerability.io/vulnerability/CVE-2020-2538,Vulnerability in Oracle WebCenter Sites Product by Oracle,"A vulnerability exists in Oracle WebCenter Sites, part of Oracle Fusion Middleware, allowing unauthenticated attackers with network access via HTTP to compromise the system. This flaw can give unauthorized users the ability to perform unauthorized updates, inserts, or deletions to accessible data. Although it primarily affects Oracle WebCenter Sites, successful exploitation can have broader implications on other connected products. The exploit requires human interaction from individuals other than the attacker, potentially leading to unauthorized read access to a subset of data and the ability to cause a partial denial of service. This vulnerability emphasizes the importance of maintaining strict access controls and applying security updates promptly.",Oracle,Webcenter Sites,7.1,HIGH,0.0007699999841861427,false,,false,false,false,,,false,false,,2020-01-15T16:33:59.000Z,0
CVE-2020-2539,https://securityvulnerability.io/vulnerability/CVE-2020-2539,Unauthenticated Vulnerability in Oracle WebCenter Sites by Oracle,"This vulnerability in Oracle WebCenter Sites affects the Advanced UI component, allowing an unauthenticated attacker with network access via HTTP to exploit the system. Successful exploitation necessitates user interaction from a third-party, but poses significant risks, including unauthorized modifications to accessible data and illicit read access to sensitive information. This exploit can not only compromise Oracle WebCenter Sites itself, but may also impact interconnected products, necessitating immediate attention to mitigate potential threats.",Oracle,Webcenter Sites,6.1,MEDIUM,0.0008299999753944576,false,,false,false,false,,,false,false,,2020-01-15T16:33:59.000Z,0
CVE-2019-2578,https://securityvulnerability.io/vulnerability/CVE-2019-2578,Unauthenticated Network Vulnerability in Oracle WebCenter Sites from Oracle,"A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, specifically in the Advanced UI subcomponent. This vulnerability can be exploited easily by an unauthenticated attacker with network access via HTTP, potentially allowing for unauthorized access to critical data. Given its nature, attacks can affect not only the Oracle WebCenter Sites itself but may also significantly impact additional products associated with the environment. Organizations utilizing affected versions must take immediate steps to secure their systems and protect sensitive information from unauthorized access.",Oracle,Webcenter Sites,8.6,HIGH,0.012849999591708183,false,,false,false,false,,,false,false,,2019-04-23T18:16:39.000Z,0
CVE-2019-2579,https://securityvulnerability.io/vulnerability/CVE-2019-2579,Unauthorized Access Vulnerability in Oracle WebCenter Sites by Oracle,"A vulnerability exists in the Advanced UI component of Oracle WebCenter Sites, part of Oracle Fusion Middleware. This issue allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to sensitive data hosted within Oracle WebCenter Sites. Attackers can exploit this vulnerability to compromise the confidentiality of the exposed data, potentially leading to significant information leaks.",Oracle,Webcenter Sites,4.3,MEDIUM,0.004170000087469816,false,,false,false,false,,,false,false,,2019-04-23T18:16:39.000Z,0
CVE-2018-3238,https://securityvulnerability.io/vulnerability/CVE-2018-3238,Vulnerability in Oracle WebCenter Sites Component of Oracle Fusion Middleware,"An access control vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware. An attacker with high privileges and network access via HTTP can exploit this flaw, requiring human interaction from another individual to successfully breach the system. While the vulnerability is specific to Oracle WebCenter Sites, successful exploitation can lead to unauthorized access to sensitive and critical data, as well as the ability to update, insert, or delete data within the system. This situation may arise from insufficient access controls, making it crucial for organizations using this software to evaluate their exposure and take appropriate security measures.",Oracle,Webcenter Sites,6.9,MEDIUM,0.005160000175237656,false,,false,false,false,,,false,false,,2018-10-17T01:00:00.000Z,0
CVE-2018-2791,https://securityvulnerability.io/vulnerability/CVE-2018-2791,Oracle WebCenter Sites Vulnerability Exposes Data to Unauthorized Access,"A vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware exposes the system to attacks from unauthenticated users. The flaw allows an attacker with network access via HTTP to manipulate Oracle WebCenter Sites without any prior authentication. Successful exploitation requires human interaction from a user other than the attacker, which can lead to unauthorized access to sensitive data. This access may result in the ability to update, insert, or delete data within Oracle WebCenter Sites, significantly compromising the integrity and confidentiality of the information managed by the system. While the vulnerability resides in WebCenter Sites, the potential consequences may extend to other affected Oracle products.",Oracle,Webcenter Sites,8.2,HIGH,0.07760000228881836,false,,false,false,false,,,false,false,,2018-04-19T02:00:00.000Z,0
CVE-2018-2584,https://securityvulnerability.io/vulnerability/CVE-2018-2584,Vulnerability in Oracle WebCenter Sites Component of Oracle Fusion Middleware,"An unauthorized access vulnerability exists within the Advanced UI component of Oracle WebCenter Sites in Oracle Fusion Middleware. This flaw can be exploited by a low-privileged attacker who has network access via HTTP. Exploiting this vulnerability allows unauthorized read access to certain data within Oracle WebCenter Sites, potentially compromising sensitive information.",Oracle,Webcenter Sites,4.3,MEDIUM,0.0007200000109151006,false,,false,false,false,,,false,false,,2018-01-18T02:00:00.000Z,0
CVE-2017-10033,https://securityvulnerability.io/vulnerability/CVE-2017-10033,Vulnerability in Oracle WebCenter Sites by Oracle Affecting Support Tools,"A vulnerability exists in Oracle WebCenter Sites within the Oracle Fusion Middleware suite. This flaw allows an unauthenticated attacker who gains access to the infrastructure where Oracle WebCenter Sites operates to potentially compromise the application. Exploitation of this vulnerability could lead to unauthorized modifications, including updates, insertions, or deletions of accessible data. Additionally, it may enable unauthorized reading of certain data within the Oracle WebCenter Sites environment. It is crucial for organizations using affected versions to promptly apply necessary mitigations to safeguard their data integrity and confidentiality.",Oracle,Webcenter Sites,4,MEDIUM,0.0020000000949949026,false,,false,false,false,,,false,false,,2017-10-19T17:00:00.000Z,0
CVE-2017-3541,https://securityvulnerability.io/vulnerability/CVE-2017-3541,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,8.2,HIGH,0.001500000013038516,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3598,https://securityvulnerability.io/vulnerability/CVE-2017-3598,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",Oracle,Webcenter Sites,3.1,LOW,0.0007399999885819852,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3591,https://securityvulnerability.io/vulnerability/CVE-2017-3591,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.002409999957308173,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3540,https://securityvulnerability.io/vulnerability/CVE-2017-3540,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebCenter Sites as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H).",Oracle,Webcenter Sites,8.6,HIGH,0.0014100000262260437,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3595,https://securityvulnerability.io/vulnerability/CVE-2017-3595,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3542,https://securityvulnerability.io/vulnerability/CVE-2017-3542,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L).",Oracle,Webcenter Sites,8.6,HIGH,0.002309999894350767,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3603,https://securityvulnerability.io/vulnerability/CVE-2017-3603,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",Oracle,Webcenter Sites,3.1,LOW,0.0007399999885819852,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3596,https://securityvulnerability.io/vulnerability/CVE-2017-3596,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L).",Oracle,Webcenter Sites,7.6,HIGH,0.0011099999537691474,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3597,https://securityvulnerability.io/vulnerability/CVE-2017-3597,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).",Oracle,Webcenter Sites,5.7,MEDIUM,0.000859999970998615,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3602,https://securityvulnerability.io/vulnerability/CVE-2017-3602,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).",Oracle,Webcenter Sites,8.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3593,https://securityvulnerability.io/vulnerability/CVE-2017-3593,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.0013099999632686377,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3594,https://securityvulnerability.io/vulnerability/CVE-2017-3594,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,5.9,MEDIUM,0.0011599999852478504,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0
CVE-2017-3554,https://securityvulnerability.io/vulnerability/CVE-2017-3554,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).",Oracle,Webcenter Sites,8.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0