The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform allows a malicious actor to gain read, modify, or delete access to data, or to cause a service failure.

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to gain read, modify, or delete access to data, or cause service interruptions...

base-indications-geographiques.inpi.fr Cross Site Scripting vulnerability OBB-3839550

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-40701 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java versions affected versions not specified Description: A security exception crash has been reported. The crash occurs in the java.base/java.util.Arrays.copyOf and java.base/java.util.ArrayList.grow functions. Recommendations: At the momen...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in E-Business suite and components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Access to sensitive data Oracle...

Vulnerabilities fixed in Oracle Enterprise Manager

Oracle has fixed vulnerabilities in Enterprise Manager components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Access to sensitive data Access to system data Oracle...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the error or succeed methods in an Avo::BaseAction subclass. An attacker can execute arbitrary scripts in the context of the user's browser session by injecting unsanitized HTML content into toast...

Security Bulletin: IBM App Connect Enterprise is vulnerable to a remote authenticated attacker due to the electron module (CVE-2023-45143)

Summary IBM App Connect Enterprise is vulnerable to allowing a remote authenticated attacker to obtain sensitive information, due to the electron module. Electron is used for Discovery Connectors in IBM App Connect Enterprise. This bulletin identifies the steps to take to address the vulnerabilit...

Oracle Patch Update, January 2024 Security Update Review

Oracle has released its first quarterly edition of Critical Patch Update, which contains patches for 389 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in a wide range of product families, includin...

Security Bulletin: IBM App Connect Enterprise is vulnerable to an information disclosure and a denial of service. (CVE-2024-22317)

Summary The remote administration API in IBM App Connect Enterprise is vulnerable to an information disclosure and denial of service vulnerability due to improper Brute Force protection. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details...

CVE-2023-45230

A security flaw was identified in EDK2, the open-source reference implementation of the UEFI specification, involving a buffer overflow vulnerability. This particular weakness enables an unauthorized attacker within the vicinity of the network to transmit a specifically crafted DHCPv6 message...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle Enterprise Manager Base Platform Security Vulnerability

Oracle Enterprise Manager Base Platform is a set of local management platform from Oracle Corporation in the United States. The platform is primarily used to manage Oracle product deployments. ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite and Oracle Installed Base are both products of Oracle Corporation Oracle.Oracle E-Business Suite is a fully integrated global business management software. The software provides customer relationship management, service management, financial management and...

CVE-2024-20934

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...

CVE-2024-20934

Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Engineering Change Order. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...

CVE-2024-20916

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. The supported version that is affected is 13.5.0.0. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment...

CVE-2024-20965

Removed by vendor...

CVE-2024-20934

CVE-2024-20934 affects Oracle E-Business Suite, Oracle Installed Base (Engineering Change Order) with versions 12.2.3–12.2.13. The vulnerability permits an unauthenticated, network-exposed attacker (HTTP) to manipulate or read Oracle Installed Base data, requiring user interaction for exploitatio...