Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. Unauthorized attackers may exploit these vulnerabilities to gain access through the HTTP network,...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain...

Oracle Siebel CRM End User Information Leak Vulnerability

The Oracle Siebel CRM End User versions 17.0 to 26.9 have a vulnerability related to information leakage. This vulnerability stems from issues with the Open UI components, allowing unauthorized attackers to access through the HTTP network and read certain accessible data without proper...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the EDI component. An attacker with low privileges and who can access via HTTP may be able to compromise the Oracle EDI Gateway and affect other products. This could result in...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Capacity through HTTP network access...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the UIF Open UI component. As a result, unauthorized attackers may gain access through the HTTP network, leading to unauthorized...

Oracle Marketing security vulnerabilities

Oracle Marketing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Audience component. They may allow unauthorized attackers to access key data or all data via the HTTP network, as well as to update, insert, or delete certain data without...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access the HTTP network and unauthorized access to certain data accessible by Helidon...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Java Server Issues component, which may allow low-privilege attackers to take control of Oracle One-to-One Fulfillment through HTTP network access...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data without proper authorization...

Oracle MySQL Cluster permission licensing and access control issues

Oracle MySQL Cluster 9.7.3 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Cluster: NDB Operator component. They may allow low-privilege attackers to gain network access via HTTP, resulting in service downtime or frequent...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers to access critical data via HTTP, enabling unauthorized access to key data or full access to...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component. It may allow unauthenticated attackers to take control of Workflow through HTTP network access, and it may also affect other products...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. They are difficult to exploit. Attackers with high privileges and access via HTTP can exploit these vulnerabilities to...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certai...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerabilities

The Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Strategic Sourcing component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 version has a security vulnerability. This vulnerability stems from issues with the Visual Analyzer component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data or all data through HTTP network access. These attacker...