CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

CVE-2024-21214

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21216

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21202

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2024-21199

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21195

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Layout Templates. Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2024-21191

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware component: FMW Control Plugin. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2024-21172

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Opera Servlet. Supported versions that are affected are 5.6.19.19, 5.6.25.8 and 5.6.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2024-21285

Oracle Banking Liquidity Management (Oracle Financial Services Applications) is affected in version 14.5.0.12.0, specifically the Reports component. The issue allows a low-privilege, network-access attacker (HTTP) to compromise the system, with human interaction required, potentially resulting in...

CVE-2024-21286

CVE-2024-21286 affects Oracle PeopleSoft Enterprise ELM Enterprise Learning Management (component: Enterprise Learning Management) on PeopleSoft 9.2. Root cause: an authorization issue in ELM allows a low-privileged attacker with network access via HTTP to compromise the application; attacks requ...

CVE-2024-21284

CVE-2024-21284 affects Oracle Banking Liquidity Management (Oracle Financial Services Applications), component Reports, in version 14.5.0.12.0. The vulnerability can be exploited by a low-privileged attacker with HTTP network access, requiring user interaction, and can lead to takeover of the aff...

CVE-2024-21281

CVE-2024-21281 affects Oracle Banking Liquidity Management (Infrastructure) in Oracle Financial Services Applications, specifically version 14.7.0.6.0. Affected component can be exploited by a high-privilege attacker with network access via HTTP; exploitation requires user interaction. Impact per...

CVE-2024-21278

CVE-2024-21278 affects Oracle E-Business Suite’s Contract Lifecycle Management for Public Sector (Award Processes). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to impersonate legitimate operations, potentially leading to u...

CVE-2024-21275

CVE-2024-21275 affects Oracle E-Business Suite, specifically the Oracle Quoting UI component, with affected versions 12.2.7–12.2.13. The issue arises from weaknesses in the authorization mechanism, enabling a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, delet...

CVE-2024-21273

CVE-2024-21273 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 7.0.22 and prior to 7.1.2. The issue allows a high-privilege attacker who can log on to the host to compromise VirtualBox and potentially access all VirtualBox data; the vulnerability is locally exploitable (Atta...

CVE-2024-21272

CVE-2024-21272 involves Oracle MySQL Connectors (Connector/Python). Affected: MySQL Connectors product, Connector/Python component, versions 9.0.0 and earlier. Vulnerability allows a remote, low-privilege attacker with network access via multiple protocols to compromise the MySQL Connectors, pote...

CVE-2024-21271

CVE-2024-21271 affects Oracle E-Business Suite, Oracle Field Service’s Field Service Engineer Portal (versions 12.2.3–12.2.13). The underlying issue is an authorization flaw that allows a low-privileged, networked attacker (HTTP) to create, delete, or modify data in Oracle Field Service, with res...

CVE-2024-21268

Summary of CVE-2024-21268 : Affects Oracle E-Business Suite (Oracle Applications Manager, Diagnostics). Affected versions are 12.2.11–12.2.13. The vulnerability allows a low-privileged, network-reachable attacker (HTTP) to compromise Oracle Applications Manager, potentially enabling unauthorized ...

CVE-2024-21269

The CVE-2024-21269 issue affects Oracle E-Business Suite, specifically the Incentive Compensation component (Compensation Plan) in versions 12.2.3–12.2.13. The root cause, as described in public sources, enables a low-privilege, network-accessible attacker (HTTP) to compromise data, potentially a...

CVE-2024-21266

CVE-2024-21266 affects Oracle E-Business Suite Oracle Advanced Pricing (Price List), versions 12.2.3–12.2.13. Root cause: insufficient authorization due to input validation in Price List, enabling a low-privileged, network-accessive attacker (HTTP) to create, delete, or modify data. Impact aligns...