Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access and unauthorized access to critical data or all accessible data...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Federated Partitions component. They may allow attackers with low privileges to access critical data through the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle Zfs Storage Appliance Kit security vulnerabilities

The Oracle Zfs Storage Appliance Kit version 8.8 has a security vulnerability. This vulnerability stems from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle WebLogic Server authorization issue vulnerability

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component issues and may allow unauthenticated attackers to access through the HTTP network. As a result, unauthorized individuals may...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges can access data via the HTTP network. They can also perform unauthorized updates, insertions, or deletions ...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues in the Analytics Web Administration component. This vulnerability may allow highly privileged attackers to gain control over Oracle Business...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. It is possible for attackers with low privileges to access and exploit JD Edwards EnterpriseOne Tools via the...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Image Packaging System component, which may allow unauthenticated attackers to gain control of Oracle Solaris through HTTP network access...

IBM ContextForge MCP Gateway Server Request Forgery Vulnerability

The IBM ContextForge MCP Gateway versions 0.1.0 to 1.0.5 have a server-side request forge vulnerability. This vulnerability stems from the lack of verification of the oauthconfig.tokenurl parameter during the OAuth login process. Certified users with gateway creation permissions can construct...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the batchupg function. Custom HTTP requests can lead to arbitrary code execution. Attackers can exploit this vulnerability through authenticated HTTP requests...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal operations component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network. This enables unauthorized access to certain data when user interaction ...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component. It may allow unauthenticated attackers to take control of Workflow through HTTP network access, and it may also affect other products...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or deletions of...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to take control of JD Edwards EnterpriseOne Tools through HTTP network...