Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:fusion_middleware:10.1.3.4:*:*:*:*:*:*:*

part: a version: 10.1.3.4 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductFusion Middleware (52da0443-bc04-5575-89a1-b1f496682ee7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3599 vulnerable 2026-06-08 04:55:15.715579 Details available
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite arbitrary files and execute arbitrary code via a full pathname in the first argument to the WriteJPG method in the NCSECWLib ActiveX control.
Published: 2011-01-19T15:00:00.000Z
Updated: 2024-08-07T03:18:52.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3598 vulnerable 2026-06-08 04:55:15.714856 Details available
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors related to Import Export Utility.
Published: 2011-01-19T15:00:00.000Z
Updated: 2024-08-07T03:18:52.301Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3595 vulnerable 2026-06-08 04:55:15.711597 Details available
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).
Published: 2011-01-19T15:00:00.000Z
Updated: 2024-08-07T03:18:51.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3592 vulnerable 2026-06-08 04:55:15.705388 Details available
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect integrity and availability via unknown vectors related to Internal Operations.
Published: 2011-01-19T15:00:00.000Z
Updated: 2024-08-07T03:18:52.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3591 vulnerable 2026-06-08 04:55:15.704898 Details available
Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Internal Operations. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can overwrite or delete arbitrary files via a full pathname in the second argument to the DownloadSingleMessageToFile method in the EMPOP3Lib ActiveX component (empop3.dll).
Published: 2011-01-19T15:00:00.000Z
Updated: 2024-08-07T03:18:51.535Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.