6672 matches found
CVE-2024-21264
The CVE-2024-21264 entry concerns Oracle PeopleSoft Enterprise CC Common Application Objects, component Activity Guide Composer, affected in version 9.2. Affected: PeopleSoft Enterprise CC Common Application Objects. Root cause: not explicitly detailed beyond the vulnerable component. Impact: a l...
CVE-2024-21265
CVE-2024-21265 affects Oracle E-Business Suite’s Site Hub component, specifically the Site Hierarchy Flows within versions 12.2.3–12.2.13 . The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation, deletion, or modification of data, yielding ...
CVE-2024-21263
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
CVE-2024-21258
CVE-2024-21258 affects Oracle E-Business Suite, specifically the Installed Base product's User Interface. The issue lies in insufficient input validation in the UI component, with affected versions 12.2.3–12.2.14. An unauthenticated attacker with network access via HTTP can read a subset of Oracl...
CVE-2024-21257
CVE-2024-21257 affects Oracle Hyperion BI+ (UI and Visualization) 11.2.18.0.000. A vulnerability due to insufficient input validation in the UI/Visualization component allows a low-privileged attacker with network-adjacent access and user interaction to read a subset of data. Exploitation require...
CVE-2024-21255
CVE-2024-21255 concerns Oracle PeopleSoft PeopleTools, specifically the XMLPublisher component in PeopleSoft Enterprise PeopleTools. The connected PT-2023-9582 entry provides concrete details: affected software is PeopleSoft Enterprise PeopleTools versions 8.59–8.61, with a flaw in input validati...
CVE-2024-21252
CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...
CVE-2024-21254
CVE-2024-21254 affects Oracle Analytics’ Oracle BI Publisher Web Server component (and concerns Layout Templates) with versions 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. The flaw allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle BI Publisher, potentially takeover the p...
CVE-2024-21250
CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...
CVE-2024-21247
Removed by vendor...
CVE-2024-21239
CVE-2024-21239: Oracle MySQL Server InnoDB vulnerability affecting MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or frequently repeating crash) in MySQL Server. ...
CVE-2024-21237
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
CVE-2024-21238
Removed by vendor...
CVE-2024-21231
CVE-2024-21231 : Vulnerability in Oracle MySQL Server (component: Client programs). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The issue is described as difficult to exploit and allows a low-privilege attacker with network access via multiple protocols to ...
CVE-2024-21232
Removed by vendor...
CVE-2024-21231
Removed by vendor...
CVE-2024-21218
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21216
CVE-2024-21216 affects Oracle WebLogic Server (Fusion Middleware core) with affected versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables an unauthenticated attacker who can reach the server over T3 or IIOP to execute code and potentially take over the WebLogic Server. CVSS 3.1 base scor...
CVE-2024-21213
CVE-2024-21213 concerns Oracle MySQL Server (InnoDB) with affected versions: 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability is described as an easily exploitable denial of service causing a hang or crash of MySQL Server, enabling a high-privilege attacker who can ...