Cloudflare Pingora resource management error vulnerability

Cloudflare Pingora versions prior to 0.8.1 have a resource management vulnerability. This vulnerability arises from HTTP/2 servers not explicitly limiting the size of the decoded header list and the number of concurrent streams. Remote unauthenticated attackers can exploit this vulnerability by...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Customer Care security vulnerabilities

Oracle Customer Care versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow unauthorized attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Approval Manager component. Unauthorized attackers may exploit these vulnerabilities to gain access through the HTTP network and take control of Siebe...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the RDBMS components, and they could allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorization...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Agent Next Gen component, which may allow attackers with low privileges to gain control of the Oracle Enterprise Manager Base Platform through HTTP network...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Applications Manager through HTTP network access...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data through the HTTP network via user interaction. This can result in unauthorized updates,...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with HTML UI components. Unauthorized attackers may gain access through the HTTP network. Without proper authorization, unauthorized updates, insertions, or deletions of certain...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. They may allow attackers with high privileges to access through the HTTP network, leading to unauthorized access to certain accessible data...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. They may allow attackers with high privileges to access through the HTTP network, leading to unauthorized access to certain accessible data...