Oracle Products Multiple vulnerabilities

Last Update Date: 17 Oct 2013 14:27 Release Date: 17 Oct 2013 4199 Views

RISK: High Risk

High Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

Multiple vulnerabilities have been identified in various Oracle products and components, which could be exploited by attackers to denial of service, escalation of privilege, remote code execution, sensitive information disclosure and tampering.

Impact

  • Denial of Service
  • Elevation of Privilege
  • Remote Code Execution
  • Information Disclosure
  • Data Manipulation

System / Technologies affected

  • Oracle Database 11g Release 1, version 11.1.0.7
  • Oracle Database 11g Release 2, versions 11.2.0.2, 11.2.0.3
  • Oracle Database 12c Release 1, version 12.1.0.1
  • Oracle Fusion Middleware 11g Release 1, versions 11.1.1.6, 11.1.1.7
  • Oracle Access Manager, versions 11.1.1.5.0, 11.1.2.0.0
  • Oracle Forms and Reports 11g, Release 2, version 11.1.2.1
  • Oracle GlassFish Server, versions 2.1.1, 3.0.1, 3.1.2
  • Oracle HTTP Server 12c, version 12.1.2
  • Oracle Identity Analytics, version 11.1.1.5; Sun Role Manager, versions 4.1, 5.0
  • Oracle Identity Manager, versions 11.1.2.0.0, 11.1.2.1.0
  • Oracle JDeveloper, versions 11.1.2.3.0, 11.1.2.4.0, 12.1.2.0.0
  • Oracle Outside In Technology, versions 8.4.0, 8.4.1
  • Oracle Portal, version 11.1.1.6.0
  • Oracle Web Cache, versions 11.1.1.6, 11.1.1.7
  • Oracle WebCenter Content, versions 10.1.3.5.1, 11.1.1.6.0, 11.1.1.7.0, 11.1.1.8.0
  • Oracle WebLogic Server, versions 10.3.6.0, 12.1.1.0
  • Oracle Web Services, versions 10.1.3.5, 11.1.1.6.0
  • Oracle Enterprise Manager Grid Control 10g Release 1, version 10.2.0.5
  • Oracle Enterprise Manager Grid Control 11g Release 1, version 11.1.0.1
  • Oracle Enterprise Manager Plugin for Database 12c Release 1, versions 12.1.0.2, 12.1.0.3, 12.1.0.4
  • Oracle E-Business Suite Release 12i, version 12.1
  • Oracle Agile PLM Framework, version 9.3.2
  • Oracle Transportation Management, versions 6.2, 6.3, 6.3.1, 6.3.2
  • Oracle PeopleSoft HRMS, version 9.1
  • Oracle PeopleSoft HRMS eCompensation, versions 9.1, 9.2
  • Oracle PeopleSoft PeopleTools, versions 8.51, 8.52, 8.53
  • Oracle Siebel Core, versions 8.1.1, 8.2.2
  • Oracle Siebel Server Remote, versions 8.1.1, 8.2.2
  • Oracle Siebel UI Framework, versions 8.1.1, 8.2.2
  • Oracle iLearning, versions 5.2.1, 6.0
  • Oracle Health Sciences InForm, versions 4.5.x, 4.6.x, 5.0.x, 5.5.x and 6.0.0
  • Oracle Siebel CTMS, version 8.1.1.x
  • Oracle Retail Invoice Matching, versions 10.2, 11.0, 12.0, 12.0IN, 12.1, 13.0, 13.1, 13.2
  • Oracle FLEXCUBE Private Banking, versions 1.7, 2.0, 2.0.1, 2.2.0.1, 3.0, 12.0.1
  • Oracle Instantis EnterpriseTrack, versions 8.0.6, 8.5
  • Oracle Primavera P6 Enterprise Project Portfolio Management, versions 8.1, 8.2, 8.3
  • Oracle JavaFX, versions 2.2.40 and earlier
  • Oracle Java JDK and JRE, versions 5.0u51 and earlier, 6u60 and earlier, 7u40 and earlier
  • Oracle Java SE Embedded, versions 7u40 and earlier
  • Oracle JRockit, versions R27.7.6 and earlier, R28.2.8 and earlier
  • Oracle Solaris versions 10, 11.1
  • Oracle SPARC Enterprise T series and M Series Servers Firmware versions prior to 6.7.13, 7.4.6.c, 8.3.0.b, 9.0.0.d, 9.0.1.e
  • Oracle Sun Blade 6000 10GBE switched NEM 1.2, Sun Network 10GBE Switch 72P 1.2, Oracle Switch ES1-24 1.3
  • Oracle Secure Global Desktop, version 5
  • Oracle VM VirtualBox, versions prior to 3.2.18, 4.0.20, 4.1.28, 4.2.18
  • Oracle MySQL Server, versions 5.1, 5.5, 5.6
  • Oracle MySQL Enterprise Monitor, version 2.3

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  •  Apply Oracle Critical Patch Update - October 2013

Vulnerability Identifier

Source

Related Link

Share with

Previous

Microsoft Internet Explorer Memory Corruption Vulnerabilities

9 Oct 2013 3664 Views

Next

Oracle Java Multiple Vulnerabilities

17 Oct 2013 4073 Views

We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie Policy.

PRIVACY POLICY