CVE-2024-21214

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2024-21216

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21208

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

CVE-2024-21209

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-21202

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2024-21205

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware component: OSB Core Functionality. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Bus...

CVE-2024-21199

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21191

Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware component: FMW Control Plugin. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2024-21195

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Layout Templates. Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

CVE-2024-21172

Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Opera Servlet. Supported versions that are affected are 5.6.19.19, 5.6.25.8 and 5.6.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2024-21285

Oracle Banking Liquidity Management (Oracle Financial Services Applications) is affected in version 14.5.0.12.0, specifically the Reports component. The issue allows a low-privilege, network-access attacker (HTTP) to compromise the system, with human interaction required, potentially resulting in...

CVE-2024-21284

CVE-2024-21284 affects Oracle Banking Liquidity Management (Oracle Financial Services Applications), component Reports, in version 14.5.0.12.0. The vulnerability can be exploited by a low-privileged attacker with HTTP network access, requiring user interaction, and can lead to takeover of the aff...

CVE-2024-21286

CVE-2024-21286 affects Oracle PeopleSoft Enterprise ELM Enterprise Learning Management (component: Enterprise Learning Management) on PeopleSoft 9.2. Root cause: an authorization issue in ELM allows a low-privileged attacker with network access via HTTP to compromise the application; attacks requ...

CVE-2024-21283

CVE-2024-21283 affects Oracle PeopleSoft Enterprise HCM Global Payroll Core (component: Global Payroll for Core) and is observed in 9.2.48–9.2.50. Connected sources confirm an authorization weakness in the Global Payroll for Core that allows a low-privilege, network-access attacker (via HTTP) to ...

CVE-2024-21281

CVE-2024-21281 affects Oracle Banking Liquidity Management (Infrastructure) in Oracle Financial Services Applications, specifically version 14.7.0.6.0. Affected component can be exploited by a high-privilege attacker with network access via HTTP; exploitation requires user interaction. Impact per...

CVE-2024-21278

CVE-2024-21278 affects Oracle E-Business Suite’s Contract Lifecycle Management for Public Sector (Award Processes). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to impersonate legitimate operations, potentially leading to u...

CVE-2024-21275

CVE-2024-21275 affects Oracle E-Business Suite, specifically the Oracle Quoting UI component, with affected versions 12.2.7–12.2.13. The issue arises from weaknesses in the authorization mechanism, enabling a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, delet...

CVE-2024-21273

CVE-2024-21273 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 7.0.22 and prior to 7.1.2. The issue allows a high-privilege attacker who can log on to the host to compromise VirtualBox and potentially access all VirtualBox data; the vulnerability is locally exploitable (Atta...

CVE-2024-21272

CVE-2024-21272 involves Oracle MySQL Connectors (Connector/Python). Affected: MySQL Connectors product, Connector/Python component, versions 9.0.0 and earlier. Vulnerability allows a remote, low-privilege attacker with network access via multiple protocols to compromise the MySQL Connectors, pote...

CVE-2024-21271

CVE-2024-21271 affects Oracle E-Business Suite, Oracle Field Service’s Field Service Engineer Portal (versions 12.2.3–12.2.13). The underlying issue is an authorization flaw that allows a low-privileged, networked attacker (HTTP) to create, delete, or modify data in Oracle Field Service, with res...