CVE-2026-62503

...

CVE-2026-62503

CVE-2026-62503 affects Oracle Time and Labor in Oracle E-Business Suite (12.2.3–12.2.15). The vulnerability involves the Internal Operations component and is exploitable by a high-privilege attacker over HTTP with network access, enabling unauthorized create/delete/modify of data and partial deni...

CVE-2025-62503

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

airflow-balancer (>=0.7.0 <=0.7.6), airflow-clickhouse-plugin (=1.5.0) +21 more potentially affected by CVE-2025-62503 via apache-airflow (>=3.0.0 <=3.1.0rc2)

apache-airflow PYPI version =3.0.0, =0.7.0, =0.6.1, =1.10.7, =0.1.0, =1.4.3, =1.2.10, =0.1.1, =3.0.0, =1.6.0, =1.5.3, =1.25.0, =3.12.0, =0.0.4, =2.0.2, =2.3.0rc1 and more Source cves: CVE-2025-62503 Source advisory: OSV:GHSA-GP5F-CX7H-8Q6F...

airflow-balancer (>=0.7.0 <=0.7.6), airflow-clickhouse-plugin (=1.5.0) +21 more potentially affected by CVE-2025-62503 via apache-airflow-core (>=3.0.0 <=3.1.0rc2)

apache-airflow-core PYPI version =3.0.0, =0.7.0, =0.6.1, =1.10.7, =0.1.0, =1.4.3, =1.2.10, =0.1.1, =3.0.0, =1.6.0, =1.5.3, =1.25.0, =3.12.0, =0.0.4, =2.0.2, =2.3.0rc1 and more Source cves: CVE-2025-62503 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-13786420...

CVE-2025-62503

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

CVE-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...

CVE-2025-62503

creationtimestamp| type| source ---|---|--- 2025-10-29 19:35:58+00:00| seen| https://seclists.org/oss-sec/2025/q4/101 2025-10-29 21:14:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4eejoh57x2n 2025-10-30 12:14:58+00:00| seen|...

Fedora 20 : systemd-207-4.fc20 (2013-17176)

Fixes polkit authentication issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...