CVE-2023-21887

Removed by vendor...

CVE-2023-21882

CVE-2023-21882 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.31 and earlier. attacker with network access via multiple protocols can compromise data integrity (unauthorized updates) with high privileges and no user interaction. Root cause: Server: Optimizer vulnerability. R...

CVE-2023-21883

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21880

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

CVE-2023-21876

CVE-2023-21876 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.31 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to cause a hang or a likely crash (complete DoS) of MySQL Server. The base CVSS v3.1 ...

CVE-2023-21874

Removed by vendor...

CVE-2023-21874

CVE-2023-21874 affects Oracle MySQL Server (Server: Thread Pooling). Affected versions are 8.0.30 and prior. Exploitation requires network access via multiple protocols by a high-privileged attacker and can cause partial denial of service to MySQL Server. The connected Nessus entries corroborate ...

CVE-2023-21870

Removed by vendor...

CVE-2023-21869

Removed by vendor...

CVE-2023-21869

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

CVE-2023-21866

CVE-2023-21866 affects Oracle MySQL Server (Server: Optimizer). Affected product/version: MySQL Server 8.0.28 and earlier. Root cause indicated by sources: vulnerability in the Optimizer component allowing a high-privileged attacker with network access via multiple protocols to cause a hang or fr...

CVE-2023-21867

Removed by vendor...

CVE-2023-21866

Removed by vendor...

CVE-2023-21862

CVE-2023-21862 affects Oracle Web Services Manager (OWSM) within Oracle Fusion Middleware, specifically the XML Security component in version 12.2.1.4.0. The issue stems from insufficient input validation, enabling an unauthenticated attacker with network access via HTTP to compromise OWSM, poten...

CVE-2023-21865

Removed by vendor...

CVE-2023-21865

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21858

The CVE-2023-21858 vulnerability affects Oracle E-Business Suite — Oracle Collaborative Planning, Installation component, in versions 12.2.3 through 12.2.12. The issue enables an unauthenticated attacker with network access via HTTP to compromise Oracle Collaborative Planning, potentially causing...

CVE-2023-21856

CVE-2023-21856 affects Oracle E-Business Suite's iSetup, specifically the General Ledger Update Transform and Reports component. Affected: Oracle E-Business Suite versions 12.2.3 through 12.2.12. The issue is exploitable remotely over HTTP by an unauthenticated attacker, potentially enabling unau...

CVE-2023-21854

CVE-2023-21854 affects Oracle E-Business Suite Oracle Sales Offline (Core Components), versions 12.2.3–12.2.12. The underlying issue is insufficient input validation in Core Components, enabling an unauthenticated, network-accessible attacker (via HTTP) to create/modify data. Impact: unauthorized...

CVE-2023-21855

CVE-2023-21855 affects Oracle E-Business Suite Oracle Sales for Handhelds (Pocket Outlook Sync/PocketPC). Affected are 12.2.3–12.2.12. The vulnerability allows an unauthenticated attacker with network access via HTTP to modify, delete, or create data within Oracle Sales for Handhelds. Root cause ...