Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing low-privilege attackers to access critical data or all accessible data through the HTTP network without proper...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core components. It may allow attackers with low privileges to access through the HTTP network, thereby unauthorizedly creating, deleting, or modifying critical data or al...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access the system via the HTTP network, resulting in...

curl information leakage vulnerability

The curl 8.22.0 and 8.21.0 versions have a vulnerability involving information leakage. This vulnerability arises from incorrectly retaining and re-transmitting the HTTP Negotiate authentication state of the original host when handling HTTP redirections that contain userinfo. This allows maliciou...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain accessible data without proper...

Oracle Applications DBA security vulnerabilities

A security vulnerability exists in Oracle Applications DBA versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to access HTTP-based networks, thereby gaining unauthorized access to critical...

Oracle ZFS Storage Appliance Kit security vulnerability

Oracle ZFS Storage Appliance Kit version 8.8 contains a security vulnerability stemming from issues in its Core component. This vulnerability may allow attackers with limited privileges to gain access to the Oracle ZFS Storage Appliance Kit via HTTP network access...

Mozilla Thunderbird encryption issues and vulnerabilities

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 have a security vulnerability related to encryption. This vulnerability arises from the fact that when setting up an account, Exchange AutoDiscover queries are made via plaintext HTTP. Unencrypted requests include user-input credentials...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle One-to-One...

Oracle PeopleSoft Enterprise PeopleTools resource management vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have a resource management vulnerability. This vulnerability stems from issues with the Business Interlink component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to access the system via HTTP. Such unauthorized access could...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component, which may allow low-privilege attackers to take control of the Oracle SOA Suite through HTTP network access...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as we...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues in the Core component and may allow low-privilege attackers to access certain accessible data via HTTP, without authorization. It may also affect other products...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Query component and may allow attackers with limited privileges to access certain accessible data via HTTP without authorization...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, enabling unauthorized updates,...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, under user interaction without proper...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...