Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to "iDoc script injection" in the (1) cs and (2) urm components, which allows attackers to read "sensitive" files, as demonstrated by obtaining the "AES encryption key and encrypted credentials" of the weblogic user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Fusion Middleware Oracle WebCenter Content组件安全漏洞
Vulnerability Description
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。 Oracle Fusion Middleware中的Oracle WebCenter Content组件中存在安全漏洞。远程经过授权的攻击者可通过Content Server利用该漏洞影响保密性和完整性。以下版本中存在漏洞：Oracle Fusion Middleware 10.1.3.5.1，11.1.1.6.0，11.1.
CVSS Information
N/A
Vulnerability Type
N/A