Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Product Hub via HTTP access, potentially affecting other products as...

Oracle US Federal Human Resources security vulnerability

A security vulnerability exists in Oracle US Federal Human Resources versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain HTTP access, thereby accessing critical data without...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the PO View Document component and may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data of Oracle Essbase without proper...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component, which may allow low-privilege attackers to take control of the Oracle SOA Suite through HTTP network access...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow unauthenticated attackers to take control of Workflow through HTTP network access...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0 and 14.1.1.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. The vulnerabilities are difficult to exploit. Unauthorized attackers can access them via the HTTP...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain access via HTTP, thereby taking control of JD Edwards...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to gain control of Oracle Product Hub via HTTP network access...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow low-privilege attackers to gain control of Oracle Engineering via HTTP network access...

Oracle Essbase security vulnerabilities

The Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all data accessible via Oracle Essbase...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Applications Manager through HTTP network access...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with limited privileges to gain access via HTTP, thereby taking control of Oracle Mobile Field Service...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Payroll through HTTP network access...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle Email Center security vulnerability

A security vulnerability exists in Oracle Email Center versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Message Component component, potentially allowing unauthenticated attackers to gain access via HTTP. Under user interaction, they may update, insert, or delete...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues in the Core component and may allow low-privilege attackers to access certain accessible data via HTTP, without authorization. It may also affect other products...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Generic REST component. Unauthorized attackers may gain access through HTTP network requests, allowing them to access critical data or fully acce...