Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...

Oracle Customer Care security vulnerabilities

Oracle Customer Care versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow unauthorized attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Applications Manager through HTTP network access...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data through the HTTP network via user interaction. This can result in unauthorized updates,...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. They may allow attackers with high privileges to access through the HTTP network, leading to unauthorized access to certain accessible data...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Siebel Apps – Marketing Cross-site Request Forgery Vulnerability

Oracle Siebel Apps – Versions 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. After user interaction, unauthorized updates, insertions, or deletion...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. The vulnerabilities are difficult to exploit. Attackers with high privileges can access data via the HTTP network, potentially leading to unauthorized...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Analytic Server component. Attackers can exploit these vulnerabilities through HTTP network access, causing the service to become suspended or crash...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Payroll through HTTP network access...

Oracle Email Center security vulnerabilities

Oracle Email Center versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Message Component component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorizatio...

Oracle Siebel Apps – Customer Order Management security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Order Management component. Attackers with low privileges may access through the HTTP network, utilize user interactions, and unauthorizedly update, insert, or delete certain...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Java Server Issues component, which may allow low-privilege attackers to take control of Oracle One-to-One Fulfillment through HTTP network access...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data without proper authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. They are difficult to exploit. Attackers with high privileges and access via HTTP can exploit these vulnerabilities to...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component, which may allow attackers with low privileges to gain control of Oracle Business Intelligence...