CVE-2025-50090

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2025-50071

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

Access Control Bypass

Overview org.graalvm.sdk:graal-sdk is a high-performance JDK distribution designed to accelerate the execution of applications written in Java and other JVM languages along with support for JavaScript, Ruby, Python, and a number of other popular languages. Affected versions of this package are...

CVE-2025-53030

...

CVE-2025-53026

...

CVE-2025-50104

...

CVE-2025-50100

CVE-2025-50100 affects Oracle MySQL Server, specifically the Thread Pooling component. Affected versions are 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. The issue is described as a high-privilege, network-access vulnerability that can, per the connected documents, enable partial denial of service...

CVE-2025-50099

...

CVE-2025-50072

...

CVE-2025-50067

CVE-2025-50067 affects Oracle Application Express, specifically the Strategic Planner Starter App. Affected versions are 24.2.4 and 24.2.5. An attacker with network access over HTTP and low privileges can exploit via social interaction to take over the Oracle APEX instance. The CVSS base score is...

CVE-2025-50066

...

CVE-2025-50059

CVE-2025-50059 targets Oracle Java SE and GraalVM family (Networking and related components). Affected versions include Oracle Java SE 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise 21.3.14. The issue enables unauthenticated, network-acce...

CVE-2025-30759

The CVE-2025-30759 issue affects Oracle Business Intelligence Enterprise Edition (OBIEE) Platform Security. Affected are Oracle Analytics OBIEE versions 7.6.0.0.0, 8.2.0.0.0 and 12.2.1.4.0. The vulnerability allows unauthenticated remote HTTP access and can lead to unauthorized data update/insert...

CVE-2025-30749

CVE-2025-30749 affects Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition (component: 2D, with JSSE/Networking/Scripting as other components) per the provided documents. Affected Oracle Java SE versions include 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; affected GraalVM for ...

Oracle E-Business Suite 访问控制错误漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications Framework for Orac...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.23 Security update (Important) (RHSA-2025:10924)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10924 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

CVE-2025-45582

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains a ../ symlink to a critical directory. Second, the victim must extract an archive that contains a critical file,...