Oracle Business Process Management Suite authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Business Process Management Suite contain an authorization issue vulnerability. This vulnerability stems from issues within the Human Workflow component and may allow unauthenticated attackers to gain access to Oracle Business Process Management Suite...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access critical data or all accessible data via the HTTP network...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component. Attackers with low privileges could exploit these vulnerabilities to gain network access and use the HTTP...

Oracle PeopleSoft Enterprise PeopleTools information leakage vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critical data o...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain accessible data are possible...

Oracle Shipping Execution security vulnerability

The Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all accessible...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. They may allow low-privilege attackers to access critical data via the HTTP network, to access all accessible data without authorization, as well as to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthenticated attackers to access through the HTTP network. This could lead to unauthorized access to critical data or all data, as well as...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all accessible data, unauthorized updates, insertions, or...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Federated Partitions component. They may allow attackers with low privileges to access critical data through the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle PeopleSoft Enterprise PeopleTools information disclosure vulnerability

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain an information disclosure vulnerability. This vulnerability stems from issues within the Report Distribution component. The unviable flaw enables unauthenticated attackers to access the system via HTTP, potentially...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities are caused by issues with the SAP ERP+ component. They may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, o...

Oracle PeopleSoft Enterprise PeopleTools information disclosure vulnerability

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain an information disclosure vulnerability. This vulnerability stems from issues within the nVision component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data without authorizatio...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

Oracle WebLogic Server Proxy Plug-in security vulnerabilities

The Oracle WebLogic Server Proxy Plug-in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. Unauthorized attackers can exploit these vulnerabilities ...

Oracle PeopleSoft Enterprise PeopleTools Authorization Vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may exploit these vulnerabilities to gain network access via HTTP and take control of...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from Tuxedo component issues, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...