CVE-2025-21566

...

CVE-2025-21565

...

CVE-2025-21566

...

CVE-2025-21565

...

CVE-2025-21565

The CVE-2025-21565 entry concerns Oracle Agile PLM Framework (Oracle Supply Chain) Install component vulnerability affecting version 9.3.6. The root cause is weaknesses in the authorization mechanism of the Install component, enabling an unauthenticated, network-accessing attacker to compromise t...

CVE-2025-21562

CVE-2025-21562 concerns Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects (Run Control Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of data from the affected object, with CVSS 3.1 base score 4.3 (Con...

CVE-2025-21561

The CVE-2025-21561 entry concerns Oracle PeopleSoft, affecting the PeopleSoft Enterprise SCM Purchasing (component: Purchasing) in version 9.2. The vulnerability allows a low-privilege, network-accessible attacker (HTTP) to perform unauthorized data updates/inserts/deletes and read access to a su...

CVE-2025-21558

...

CVE-2025-21558

The CVE-2025-21558 entry concerns Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions are 20.12.1.0–20.12.21.5, 21.12.1.0–21.12.20.0, and 22.12.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access over HTTP to compro...

CVE-2025-21559

CVE-2025-21559 affects Oracle MySQL Server (InnoDB) with vulnerable versions listed as 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited by a high-privileged attacker remotely over multiple protocols to cause a hang or crash (complete DoS) and may al...

CVE-2025-21556

...

CVE-2025-21557

...

CVE-2025-21557

CVE-2025-21557 affects Oracle Application Express (General component) with affected versions 23.2 and 24.1. The issue allows a low-privileged, network-facing attacker over HTTP to cause unauthorized update/insert/delete and read access to Oracle APEX data, requiring user interaction. Root cause r...

CVE-2025-21556

CVE-2025-21556 affects Oracle Agile PLM Framework (9.3.6) via the Agile Integration Services component. The vulnerability permits takeover with network access over HTTP by a low-privilege attacker, with CVSS 3.1 base score 9.9 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). Oracle’s January 2025 Critical ...

CVE-2025-21551

...

CVE-2025-21545

CVE-2025-21545 affects Oracle PeopleSoft Enterprise PeopleTools OpenSearch in versions 8.60 and 8.61. The vulnerability allows an unauthenticated attacker over HTTP with network access to cause a hang or frequent crash (DoS). CVSSv3.1 base score is 7.5 (Availability impact). Several sources confi...

CVE-2025-21546

...

CVE-2025-21544

...

CVE-2025-21543

...

CVE-2025-21542

CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...