Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal operations component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Vulnerability related to permission and access control issues in Oracle PeopleSoft Enterprise PeopleTools

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Report Distribution component, potentially allowing unauthenticated attackers to gain unauthorized acce...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network. This enables unauthorized access to certain data when user interaction ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Web Server component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Image Packaging System component, which may allow unauthenticated attackers to gain control of Oracle Solaris through HTTP network access...

IBM ContextForge MCP Gateway Server Request Forgery Vulnerability

The IBM ContextForge MCP Gateway versions 0.1.0 to 1.0.5 have a server-side request forge vulnerability. This vulnerability stems from the lack of verification of the oauthconfig.tokenurl parameter during the OAuth login process. Certified users with gateway creation permissions can construct...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues. Unauthorized attackers may gain access through the HTTP network. Key data or all accessible data may be accessed without user interaction. Additionally...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to gain control of Oracle Product Hub via HTTP network access...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to access certain Oracle Purchasing data via HTTP, enabling unauthorized updates, insertions, o...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Metadata Plugin component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

Oracle Application Object Library security vulnerability

A security vulnerability exists in Oracle Application Object Library versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Flexfields component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of the Oracle Application...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized updates, insertion, or deletion of some...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the batchupg function. Custom HTTP requests can lead to arbitrary code execution. Attackers can exploit this vulnerability through authenticated HTTP requests...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, or deletions of certain...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...