Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or acces...

Security vulnerabilities in Oracle E-Business Suite Integrated SOA Gateway

Security vulnerabilities exist in Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the SOA Provider component, potentially allowing unauthenticated attackers to gain access via HTTP. This could result in unauthorized...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. They may allow unauthorized attackers to access critical data or all data via the HTTP network, as well as to update, insert, or delete parts ...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Product Hub via HTTP access, potentially affecting other products as...

Oracle Contract Lifecycle Management for Public Sector security vulnerabilities

Oracle Contract Lifecycle Management for the public sector versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Award/PO component. This may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, ...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to create, delete, or modify critical data or all data...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Server component, which may allow unauthorized attackers to access critical data or all accessible data via HTTP network connections...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 25.12 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open Integration component. Unauthorized attackers can access through the HTTP network. Without interaction from authorized users, this allows unauthorized...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component, potentially allowing unauthenticated attackers to gain access via HTTP networks and thereby access critical data or all accessible da...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to access through the HTTP network, resulting in the takeover of Oracle...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access data via the HTTP network, enabling unauthorized updates, insertions, ...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing low-privilege attackers to access critical data or all accessible data through the HTTP network without proper...

Oracle Applications DBA security vulnerabilities

A security vulnerability exists in Oracle Applications DBA versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, gain unauthorized access to key data, or access all dat...

Oracle Materials Requirement Planning security vulnerability

A security vulnerability exists in Oracle Materials Requirement Planning versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges to gain access to Materials Requirement Planning via HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without...

Oracle ZFS Storage Appliance Kit security vulnerability

Oracle ZFS Storage Appliance Kit version 8.8 contains a security vulnerability stemming from issues in its Core component. This vulnerability may allow attackers with limited privileges to gain access to the Oracle ZFS Storage Appliance Kit via HTTP network access...

Mozilla Thunderbird encryption issues and vulnerabilities

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 have a security vulnerability related to encryption. This vulnerability arises from the fact that when setting up an account, Exchange AutoDiscover queries are made via plaintext HTTP. Unencrypted requests include user-input credentials...