6697 matches found
CVE-2023-22128
CVE-2023-22128 affects Oracle Solaris (Filesystem) on Solaris 10 and 11. The vulnerability is exploitable by an unauthenticated attacker with network access via rquota, with user interaction required, leading to possible unauthorized read access to a subset of data. The published summaries consis...
CVE-2023-22129
CVE-2023-22129 affects Oracle Solaris 11 kernel on SPARC systems. The vulnerability allows a low-privilege user with logon to the host to cause a hang or frequently repeatable crash (DoS) of Oracle Solaris, with impact on availability and no confidentiality/integrity impact per the CVSS data. Con...
CVE-2023-22126
Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware 12.2.1.4.0 is affected by CVE-2023-22126. The vulnerability allows an unauthenticated attacker with network access via HTTP to read a subset of Oracle WebCenter Content data. The CVSS 3.1 base score is 5.3 (Confidentiality impa...
CVE-2023-22124
CVE-2023-22124 affects Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications, specifically versions 14.5–14.7. The issue stems from insufficient input validation in the Infrastructure component, enabling a low-privileged attacker who can reach the system over HTT...
CVE-2023-22122
Oracle Banking Trade Finance (Infrastructure component) in Oracle Financial Services Applications, versions 14.5–14.7, is affected. The root cause is insufficient input validation in the Infrastructure layer, allowing a low-privileged attacker with HTTP network access to compromise the system, wi...
CVE-2023-22121
Oracle Banking Trade Finance (Infrastructure) in Oracle Financial Services Applications is affected for versions 14.5–14.7. The vulnerability allows an unauthenticated attacker with network access via HTTP, after user interaction, to modify or read data (unauthorized update/insert/delete and read...
CVE-2023-22119
The CVE affects Oracle FLEXCUBE Universal Banking (Infrastructure) in Oracle Financial Services Applications, with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. The underlying issue is insufficient input validation, allowing a low-privileged attacker with network access via HTTP to compr...
CVE-2023-22118
CVE-2023-22118 affects Oracle FLEXCUBE Universal Banking (Infrastructure) with affected versions 12.3, 12.4, 14.0–14.3 and 14.5–14.7. Vulnerability allows a low‑privileged attacker with network access via HTTP, with required user interaction, to modify/read data and cause a partial DOS. Mitigatio...
CVE-2023-22117
CVE-2023-22117 affects Oracle FLEXCUBE Universal Banking (Infrastructure component). Vulnerable versions: 12.3, 12.4, 14.0–14.3, and 14.5–14.7. Root cause cited in connected sources: insufficient input validation in the Infrastructure component, enabling a low-privileged attacker with network acc...
CVE-2023-22113
CVE-2023-22113 affects Oracle MySQL Server (Server: Security: Encryption) and is applicable to MySQL 8.0.33 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to potentially read a subset of data, with the CVSS v3.1 base score of 2.7 (low im...
CVE-2023-22114
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-22114
CVE-2023-22114 affects Oracle MySQL (InnoDB) with versions 8.0.34 and earlier and 8.1.0. An attacker with network access via multiple protocols and high privileges could trigger a hang or crash (DoS). Public materials identify the vulnerability and impact but do not provide exploitation details i...
CVE-2023-22110
CVE-2023-22110 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.33 and earlier. Vulnerability allows a high-privilege, remote attacker to cause a hang or frequent, repeatable crashes (complete DOS) via network access across multiple protocols. Base score 4.9 (Availability impa...
CVE-2023-22112
CVE-2023-22112 concerns Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.34 and earlier. Exploitation requires remote authentication with network access; impact is availability: attacker can cause hang or complete DoS via multiple protocols. Several connected advisories (Debian, AlmaL...
CVE-2023-22108
CVE-2023-22108 is a vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting Core in versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise the server, potentially leading to unauthorized data access or full server access...
CVE-2023-22106
CVE-2023-22106 affects Oracle E-Business Suite — Oracle Enterprise Command Center Framework (ECC) API, vulnerable in ECC versions 8, 9, 10. Underlying issue allows a low-privilege, network-accessible attacker over HTTP to access restricted data (confidentiality impact). CVSS 3.1 base score 6.5 (C...
CVE-2023-22105
Oracle BI Publisher in Oracle Analytics (Web Server component) is affected by CVE-2023-22105 for versions 6.4.0.0.0 and 7.0.0.0.0. The issue allows a low-privileged, network-access attacker (via HTTP) to compromise BI Publisher, with required user interaction, potentially leading to unauthorized ...
CVE-2023-22104
CVE-2023-22104 affects Oracle MySQL Server (InnoDB). Affected: MySQL 8.0.32 and earlier. Description in connected sources confirms a high-privilege attacker with network access can cause availability impact (hang or frequent crash) of MySQL Server via multiple protocols. No explicit exploit detai...
CVE-2023-22101
CVE-2023-22101 affects Oracle WebLogic Server (Fusion Middleware) Core component on 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated remote takeover via network access over T3/IIOP; CVSS v3.1 base score 8.1 (HIGH) with full confidentiality, integrity, and availability impact. P...
