42967 matches found
CVE-2024-21272
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...
CVE-2024-21268
Summary of CVE-2024-21268 : Affects Oracle E-Business Suite (Oracle Applications Manager, Diagnostics). Affected versions are 12.2.11–12.2.13. The vulnerability allows a low-privileged, network-reachable attacker (HTTP) to compromise Oracle Applications Manager, potentially enabling unauthorized ...
CVE-2024-21269
The CVE-2024-21269 issue affects Oracle E-Business Suite, specifically the Incentive Compensation component (Compensation Plan) in versions 12.2.3–12.2.13. The root cause, as described in public sources, enables a low-privilege, network-accessible attacker (HTTP) to compromise data, potentially a...
CVE-2024-21266
CVE-2024-21266 affects Oracle E-Business Suite Oracle Advanced Pricing (Price List), versions 12.2.3–12.2.13. Root cause: insufficient authorization due to input validation in Price List, enabling a low-privileged, network-accessive attacker (HTTP) to create, delete, or modify data. Impact aligns...
CVE-2024-21263
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
CVE-2024-21264
The CVE-2024-21264 entry concerns Oracle PeopleSoft Enterprise CC Common Application Objects, component Activity Guide Composer, affected in version 9.2. Affected: PeopleSoft Enterprise CC Common Application Objects. Root cause: not explicitly detailed beyond the vulnerable component. Impact: a l...
CVE-2024-21265
CVE-2024-21265 affects Oracle E-Business Suite’s Site Hub component, specifically the Site Hierarchy Flows within versions 12.2.3–12.2.13 . The vulnerability allows a low-privilege, network-accessible attacker (via HTTP) to cause unauthorized creation, deletion, or modification of data, yielding ...
CVE-2024-21258
CVE-2024-21258 affects Oracle E-Business Suite, specifically the Installed Base product's User Interface. The issue lies in insufficient input validation in the UI component, with affected versions 12.2.3–12.2.14. An unauthenticated attacker with network access via HTTP can read a subset of Oracl...
CVE-2024-21257
CVE-2024-21257 affects Oracle Hyperion BI+ (UI and Visualization) 11.2.18.0.000. A vulnerability due to insufficient input validation in the UI/Visualization component allows a low-privileged attacker with network-adjacent access and user interaction to read a subset of data. Exploitation require...
CVE-2024-21254
CVE-2024-21254 affects Oracle Analytics’ Oracle BI Publisher Web Server component (and concerns Layout Templates) with versions 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. The flaw allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle BI Publisher, potentially takeover the p...
CVE-2024-21255
CVE-2024-21255 concerns Oracle PeopleSoft PeopleTools, specifically the XMLPublisher component in PeopleSoft Enterprise PeopleTools. The connected PT-2023-9582 entry provides concrete details: affected software is PeopleSoft Enterprise PeopleTools versions 8.59–8.61, with a flaw in input validati...
CVE-2024-21252
CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...
CVE-2024-21250
CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...
CVE-2024-21247
Removed by vendor...
CVE-2024-21239
CVE-2024-21239: Oracle MySQL Server InnoDB vulnerability affecting MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or frequently repeating crash) in MySQL Server. ...
CVE-2024-21238
Removed by vendor...
CVE-2024-21237
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
CVE-2024-21231
CVE-2024-21231 : Vulnerability in Oracle MySQL Server (component: Client programs). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The issue is described as difficult to exploit and allows a low-privilege attacker with network access via multiple protocols to ...