4 matches found
CVE-2026-61141
The CVE-2026-61141 entry concerns Oracle E-Business Suite Oracle Advanced Benefits (component: Affordable Care Act), affected in versions 12.2.7–12.2.15. It describes a network-accessible, low-privilege vulnerability that can compromise Oracle Advanced Benefits with CVSS 3.1 base score 7.5 (C/H/I...
SUSE CVE-2025-61141
sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands...
CVE-2025-61141
sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands...
CVE-2025-61141
sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands...