Oracle General Ledger security vulnerabilities

Oracle General Ledger versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Document Management and Collaboration security vulnerabilities

Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Attachments component. They may allow low-privilege attackers to access critical data through HTTP network requests without user interaction. This...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Create Item Instance component. Vulnerable attackers may access critical data or all data through HTTP network interactions without proper authorization. They may also...

Oracle Service Bus security vulnerabilities

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network, causing the service to become suspended or crash frequently...

Oracle Service Bus permission and access control vulnerabilities

The Oracle Service Bus 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Core components, and they could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of the...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability. This vulnerability stems from issues with the Image Packaging System component. It may allow unauthorized attackers to access the network via HTTP, requiring user interaction. As a result, unauthorized access to critical data or all da...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Fabric Layer component, which may allow unauthenticated attackers to access through the HTTP network, potentially gaining control of the Oracle SOA Suit...

Oracle Outside In Technology Resource Management Vulnerability

Oracle Outside In Technology version 8.5.8 has a resource management vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access through the HTTP network, causing the service to hang or frequently crash repeatedly, resultin...

Oracle Service Bus authorization issue vulnerability

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component problems, and it may allow low-privilege attackers to take control of Oracle Service Bus through HTTP network access...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil Security Vulnerabilities

Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Common Objects component. It may allow unauthorized attackers to access through the HTTP network, enabling them to update, insert, or delete certain...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow low-privilege attackers to take control of Oracle Solaris through HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow low-privilege attackers to access critical data or all data via the HTTP network, as well as cause certa...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Test Framework component. Attackers with low privileges can access data through the HTTP network, requiring user interaction. This may lead to unauthorized...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 25.12 to version 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Workflow component. They require interaction from non-attacker users. This could allow attackers with low permissions to access and take control of...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthenticated attackers can access critical data or all data through the HTTP...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or access all data tha...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access through the HTTP network, potentially leading to unauthorized update...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of Oracle Agile Product Lifecycle Management for Process through...