Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the QAS component. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain accessible data without...

Oracle iSupport security vulnerabilities

A security vulnerability exists in Oracle iSupport versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Service Requests component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-grpc-server component. Unauthorized attackers may gain access through HTTP/2 networks, allowing them to perform unauthorized updates, insert or delete certain accessible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow unauthenticated attackers to access it via HTTP, enabling unauthorized updates, insertions, or deletions of certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Web Server component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, resulting i...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to access through the HTTP network, resulting in the takeover of Oracle...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Security vulnerabilities in Oracle E-Business Suite Integrated SOA Gateway

Security vulnerabilities exist in Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the SOA Provider component, potentially allowing unauthenticated attackers to gain access via HTTP. This could result in unauthorized...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component, potentially allowing unauthenticated attackers to gain access via HTTP networks and thereby access critical data or all accessible da...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Multichannel Framework component, which may allow high-privilege attackers to take control of PeopleSoft Enterprise PeopleTools through HTTP network access...

Oracle PeopleSoft Enterprise PeopleTools information leakage vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. They may allow attackers with high privileges to access data through the HTTP network, enabling unauthorized access to certa...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network access...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing low-privilege attackers to access critical data or all accessible data through the HTTP network without proper...

Oracle WebCenter Portal security vulnerabilities

Oracle WebCenter Portal versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Runtime Tools component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data without prope...

Oracle Contract Lifecycle Management for Public Sector security vulnerabilities

Oracle Contract Lifecycle Management for the public sector versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Award/PO component, and they could allow low-privilege attackers to take control of Oracle Contract Lifecycle Management for the...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle Applications DBA security vulnerabilities

A security vulnerability exists in Oracle Applications DBA versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical...

Oracle ZFS Storage Appliance Kit security vulnerability

Oracle ZFS Storage Appliance Kit version 8.8 contains a security vulnerability stemming from issues in its Core component. This vulnerability may allow attackers with limited privileges to gain access to the Oracle ZFS Storage Appliance Kit via HTTP network access...