Mozilla Thunderbird encryption issues and vulnerabilities

Versions of Mozilla Thunderbird prior to 158.0.1 and 153.5.1 have a security vulnerability related to encryption. This vulnerability arises from the fact that when setting up an account, Exchange AutoDiscover queries are made via plaintext HTTP. Unencrypted requests include user-input credentials...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle One-to-One...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues in the Core component and may allow low-privilege attackers to access certain accessible data via HTTP, without authorization. It may also affect other products...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, enabling unauthorized updates,...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin UI components. Unauthorized attackers may gain access through HTTP network connections. They can create, delete, or modify critical data or all accessible da...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. They are difficult to exploit, and unauthorized attackers may gain access through...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Case management Service 11g+ component. They may allow unauthorized attackers to access critical data or all accessible data via HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Panel Processor component. Exploitation is relatively difficult; low-privilege attackers can access data via the HTTP network, requiring interaction with...

Cloudflare Pingora resource management error vulnerability

Cloudflare Pingora versions prior to 0.8.1 have a resource management vulnerability. This vulnerability arises from HTTP/2 servers not explicitly limiting the size of the decoded header list and the number of concurrent streams. Remote unauthenticated attackers can exploit this vulnerability by...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. They could allow low-privilege attackers to gain control of Oracle iSetup throu...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues within the helidon-security-providers-jwt component, potentially allowing unauthenticated attackers to access certain data accessible via HTTP without authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Query component and may allow attackers with limited privileges to access certain accessible data via HTTP without authorization...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...