cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2024-20908,https://securityvulnerability.io/vulnerability/CVE-2024-20908,Vulnerability in Oracle WebCenter Sites Affects Oracle Fusion Middleware,"A vulnerability exists in Oracle WebCenter Sites, a component of Oracle Fusion Middleware, which permits an unauthenticated attacker with network access via HTTP to exploit the system. The vulnerability impacts version 12.2.1.4.0, enabling potential unauthorized updates, inserts, or deletions of data, along with unauthorized read access to certain data. Exploitation requires human interaction from individuals other than the attacker, leading to potentially significant effects on the wider Oracle ecosystem. Organizations are encouraged to evaluate their defenses against this vulnerability to mitigate risks related to data integrity and confidentiality.",Oracle,WebCenter Sites,6.1,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2024-01-16T21:41:13.320Z,0 CVE-2022-21575,https://securityvulnerability.io/vulnerability/CVE-2022-21575,Vulnerability in Oracle WebCenter Sites Support Tools Product of Oracle,"The vulnerability in Oracle WebCenter Sites Support Tools allows attackers with high privileges to exploit HTTP access, compromising sensitive data and gaining unauthorized control over critical operations, including data manipulation and service interruptions. This includes unauthorized updates, inserts, or deletions, raising serious security concerns for users of affected versions.",Oracle,Webcenter Sites,6,MEDIUM,0.00044999999227002263,false,,false,false,false,,,false,false,,2022-07-19T21:08:29.000Z,0 CVE-2020-14613,https://securityvulnerability.io/vulnerability/CVE-2020-14613,Vulnerability in Oracle WebCenter Sites Advanced User Interface Affecting Oracle,"An unauthenticated vulnerability exists in the Advanced User Interface of Oracle WebCenter Sites that allows unauthorized individuals to exploit the system with network access via HTTP. Successful exploitation can lead to unauthorized modifications, deletions, or unauthorized reading of sensitive data, significantly affecting security and confidentiality in Oracle WebCenter Sites. This vulnerability requires interactive participation from users who are not the attackers, emphasizing the need for heightened user awareness and security measures surrounding the affected Oracle products.",Oracle,Webcenter Sites,6.1,MEDIUM,0.0008299999753944576,false,,false,false,false,,,false,false,,2020-07-15T17:34:30.000Z,0 CVE-2020-2739,https://securityvulnerability.io/vulnerability/CVE-2020-2739,Access Vulnerability in Oracle WebCenter Sites by Oracle Fusion Middleware,"A vulnerability exists within Oracle WebCenter Sites that enables an unauthenticated attacker with network access via HTTP to exploit the system. This access could lead to unauthorized data exposure. The vulnerability requires human interaction from a user other than the attacker to be exploited. The repercussions of the exploitation may not be limited to Oracle WebCenter Sites but can also affect other associated Oracle products, potentially resulting in access to critical data.",Oracle,Webcenter Sites,7.4,HIGH,0.0019199999514967203,false,,false,false,false,,,false,false,,2020-04-15T13:29:44.000Z,0 CVE-2020-2538,https://securityvulnerability.io/vulnerability/CVE-2020-2538,Vulnerability in Oracle WebCenter Sites Product by Oracle,"A vulnerability exists in Oracle WebCenter Sites, part of Oracle Fusion Middleware, allowing unauthenticated attackers with network access via HTTP to compromise the system. This flaw can give unauthorized users the ability to perform unauthorized updates, inserts, or deletions to accessible data. Although it primarily affects Oracle WebCenter Sites, successful exploitation can have broader implications on other connected products. The exploit requires human interaction from individuals other than the attacker, potentially leading to unauthorized read access to a subset of data and the ability to cause a partial denial of service. This vulnerability emphasizes the importance of maintaining strict access controls and applying security updates promptly.",Oracle,Webcenter Sites,7.1,HIGH,0.0007699999841861427,false,,false,false,false,,,false,false,,2020-01-15T16:33:59.000Z,0 CVE-2020-2539,https://securityvulnerability.io/vulnerability/CVE-2020-2539,Unauthenticated Vulnerability in Oracle WebCenter Sites by Oracle,"This vulnerability in Oracle WebCenter Sites affects the Advanced UI component, allowing an unauthenticated attacker with network access via HTTP to exploit the system. Successful exploitation necessitates user interaction from a third-party, but poses significant risks, including unauthorized modifications to accessible data and illicit read access to sensitive information. This exploit can not only compromise Oracle WebCenter Sites itself, but may also impact interconnected products, necessitating immediate attention to mitigate potential threats.",Oracle,Webcenter Sites,6.1,MEDIUM,0.0008299999753944576,false,,false,false,false,,,false,false,,2020-01-15T16:33:59.000Z,0 CVE-2019-2578,https://securityvulnerability.io/vulnerability/CVE-2019-2578,Unauthenticated Network Vulnerability in Oracle WebCenter Sites from Oracle,"A vulnerability exists in the Oracle WebCenter Sites component of Oracle Fusion Middleware, specifically in the Advanced UI subcomponent. This vulnerability can be exploited easily by an unauthenticated attacker with network access via HTTP, potentially allowing for unauthorized access to critical data. Given its nature, attacks can affect not only the Oracle WebCenter Sites itself but may also significantly impact additional products associated with the environment. Organizations utilizing affected versions must take immediate steps to secure their systems and protect sensitive information from unauthorized access.",Oracle,Webcenter Sites,8.6,HIGH,0.012849999591708183,false,,false,false,false,,,false,false,,2019-04-23T18:16:39.000Z,0 CVE-2019-2579,https://securityvulnerability.io/vulnerability/CVE-2019-2579,Unauthorized Access Vulnerability in Oracle WebCenter Sites by Oracle,"A vulnerability exists in the Advanced UI component of Oracle WebCenter Sites, part of Oracle Fusion Middleware. This issue allows a low-privileged attacker with network access via HTTP to gain unauthorized read access to sensitive data hosted within Oracle WebCenter Sites. Attackers can exploit this vulnerability to compromise the confidentiality of the exposed data, potentially leading to significant information leaks.",Oracle,Webcenter Sites,4.3,MEDIUM,0.0049299998208880424,false,,false,false,false,,,false,false,,2019-04-23T18:16:39.000Z,0 CVE-2018-3238,https://securityvulnerability.io/vulnerability/CVE-2018-3238,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 6.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N).",Oracle,Webcenter Sites,6.9,MEDIUM,0.005160000175237656,false,,false,false,false,,,false,false,,2018-10-17T01:00:00.000Z,0 CVE-2018-2791,https://securityvulnerability.io/vulnerability/CVE-2018-2791,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebCenter Sites, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N).",Oracle,Webcenter Sites,8.2,HIGH,0.07760000228881836,false,,false,false,false,,,false,false,,2018-04-19T02:00:00.000Z,0 CVE-2018-2584,https://securityvulnerability.io/vulnerability/CVE-2018-2584,,Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). The supported version that is affected is 11.1.1.8.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).,Oracle,Webcenter Sites,4.3,MEDIUM,0.0007200000109151006,false,,false,false,false,,,false,false,,2018-01-18T02:00:00.000Z,0 CVE-2017-10033,https://securityvulnerability.io/vulnerability/CVE-2017-10033,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebCenter Sites executes to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. Note: Please refer to Doc ID My Oracle Support Note 2318213.1 for instructions on how to address this issue. CVSS 3.0 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).",Oracle,Webcenter Sites,4,MEDIUM,0.0020000000949949026,false,,false,false,false,,,false,false,,2017-10-19T17:00:00.000Z,0 CVE-2017-3603,https://securityvulnerability.io/vulnerability/CVE-2017-3603,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",Oracle,Webcenter Sites,3.1,LOW,0.0007399999885819852,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3554,https://securityvulnerability.io/vulnerability/CVE-2017-3554,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).",Oracle,Webcenter Sites,8.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3596,https://securityvulnerability.io/vulnerability/CVE-2017-3596,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebCenter Sites. CVSS 3.0 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L).",Oracle,Webcenter Sites,7.6,HIGH,0.0011099999537691474,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3598,https://securityvulnerability.io/vulnerability/CVE-2017-3598,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",Oracle,Webcenter Sites,3.1,LOW,0.0007399999885819852,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3595,https://securityvulnerability.io/vulnerability/CVE-2017-3595,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3545,https://securityvulnerability.io/vulnerability/CVE-2017-3545,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N).",Oracle,Webcenter Sites,8.2,HIGH,0.0029700000304728746,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3591,https://securityvulnerability.io/vulnerability/CVE-2017-3591,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.002409999957308173,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3541,https://securityvulnerability.io/vulnerability/CVE-2017-3541,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,8.2,HIGH,0.001500000013038516,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3540,https://securityvulnerability.io/vulnerability/CVE-2017-3540,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebCenter Sites as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data and unauthorized read access to a subset of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H).",Oracle,Webcenter Sites,8.6,HIGH,0.0014100000262260437,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3602,https://securityvulnerability.io/vulnerability/CVE-2017-3602,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebCenter Sites accessible data as well as unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).",Oracle,Webcenter Sites,8.1,HIGH,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3597,https://securityvulnerability.io/vulnerability/CVE-2017-3597,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N).",Oracle,Webcenter Sites,5.7,MEDIUM,0.000859999970998615,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3593,https://securityvulnerability.io/vulnerability/CVE-2017-3593,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily ""exploitable"" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,7.1,HIGH,0.0013099999632686377,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0 CVE-2017-3594,https://securityvulnerability.io/vulnerability/CVE-2017-3594,,"Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebCenter Sites. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data as well as unauthorized update, insert or delete access to some of Oracle WebCenter Sites accessible data. CVSS 3.0 Base Score 5.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).",Oracle,Webcenter Sites,5.9,MEDIUM,0.0011599999852478504,false,,false,false,false,,,false,false,,2017-04-24T19:00:00.000Z,0