CVE-2025-21544

Oracle Communications Order and Service Management (part of Oracle Communications Applications) is affected in versions 7.4.0–7.5.0. The issue arises from improper permission handling/storage in the component, enabling a low-privileged, network-accessing attacker (HTTP) to modify or read accessib...

CVE-2025-21542

...

CVE-2025-21540

CVE-2025-21540 affects Oracle MySQL Server (component: Server: Security: Privileges). The publicly documented impact is a low-privilege, network-accessible attacker could read and simultaneously update/insert/delete data in MySQL Server data that is exposed to the attacker. Affected versions are ...

CVE-2025-21540

...

CVE-2025-21541

CVE-2025-21541 affects Oracle E-Business Suite Workflow, component Admin Screens and Grants UI, with exposed vulnerability in versions 12.2.3–12.2.14. The issue allows a low-privilege, network-authenticated attacker (HTTP) to perform unauthorized updates, inserts, or deletes and to read a subset ...

CVE-2025-21539

...

CVE-2025-21539

...

CVE-2025-21537

CVE-2025-21537 affects Oracle PeopleSoft, specifically the Cash Management component of PeopleSoft Enterprise FIN Cash Management, version 9.2. The vulnerability arises from weaknesses in the authorization mechanism of Cash Management that can be exploited remotely over HTTP by a low-privilege at...

CVE-2025-21538

...

CVE-2025-21537

...

CVE-2025-21535

...

CVE-2025-21535

...

CVE-2025-21535

CVE-2025-21535 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. The vulnerable products are WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0. The flaw allows an unauthenticated attacker with network access via T3 or IIOP to take over the WebLogic Server, with impacts on confid...

CVE-2025-21534

...

CVE-2025-21534

CVE-2025-21534 is a vulnerability in the MySQL Server product (component: Server: Performance Schema). Affected versions are 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. The description states the vulnerability is easily exploitable by a high-privilege attacker with network access via ...

CVE-2025-21531

...

CVE-2025-21529

...

CVE-2025-21527

...

CVE-2025-21523

...

CVE-2025-21522

CVE-2025-21522 affects Oracle MySQL Server (component: Server: Parser). Affected versions are MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited remotely by a low-privilege attacker with network access via multiple protocols, leading to an unaut...