4979 matches found
PT-2026-77651
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Repor...
CVE-2026-70884: Improper Access Control
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...
PT-2026-77877
Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle...
CVE-2026-62636: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Report...
PT-2026-78048
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 26.1.0.0.0 Description A flaw exists in the Web Service API component of the Oracle BI Publisher product of Oracle Analytics. A low privileged attacker with network access via...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
CVE-2026-73571
CVE-2026-73571 is an authorization bypass in Zimbra Collaboration (ZCS) before 10.1.17 , caused by improper validation in the delegated email-sending functionality. An authenticated attacker can send specially crafted SOAP requests to the SaveDraftRequest handler to impersonate another user and s...
CVE-2026-73571
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
EUVD-2026-58070
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation
A flaw was found in the Apache Camel CXF SOAP component. A remote attacker can exploit this vulnerability by manipulating the operationName header in an unauthenticated HTTP request. This improper input validation allows the attacker to force the CxfProducer to invoke unintended SOAP operations o...
Improper Input Validation
Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to unfiltered operationName and operationNamespace headers from inbound HTTP requests, which allows an attacker to control the SOAP operation invoked by the CXF producer and potentially trigger unintended or...
CVE-2026-73571: Incorrect Authorization
An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...
PT-2026-71677
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions prior to 10.1.17 Description An authorization bypass occurs due to improper validation in the delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to the...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache SOAP
Summary Multiple vulnerabilities in Apache SOAP that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2022-40705 DESCRIPTION: An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to rea...
Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)
According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...
K000162836: PHP vulnerability CVE-2026-7262
Security Advisory Description In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to...
CVE-2025-12317 Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges
When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user. This vulnerability could allow users to retain their previous access privileges even after their roles have been revoked. As a...
