CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks...

CVE-2025-32529

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n/a through = 2.0.57...

CVE-2025-32529

CVE-2025-32529 denotes a Reflected XSS in the iONE360 configurator affecting versions 2.0.56 and earlier. The descriptive and connected sources confirm the affected product and the attack type, with a CVSS v3.1 base score of 7.1 (HIGH) indicating significant impact. The provided documents do not ...

CVE-2025-32529 WordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n/a through = 2.0.57...

CVE-2025-32529 WordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n/a through = 2.0.57...

PT-2025-17101 · Unknown · Ione360 Configurator

Name of the Vulnerable Software and Affected Versions: iONE360 configurator versions 2.0.0 through 2.0.56 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the iONE360 configurator...

CVE-2025-32529: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iONE360 iONE360 configurator ione360-configurator allows Reflected XSS.This issue affects iONE360 configurator: from n/a through = 2.0.57...

WordPress plugin iONE360 configurator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Vulnerabilities fixed in Oracle E-Business Suite

Oracle has fixed vulnerabilities in Oracle E-Business Suite Specifically for versions 12.2.3 to 12.2.14. The vulnerabilities are in several components of the Oracle E-Business Suite, including the Enterprise Command Center Framework, CRM Technical Foundation, iSupplier Portal, iStore, User...

CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks...

CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks...

CVE-2025-30720

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Orders. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attac...

CVE-2025-30720

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Orders. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attac...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Configurator versions 12.2.3...

Oracle Configurator 安全漏洞

Oracle Configurator is an Oracle product service that provides proactive collection and management of customer requirements for Oracle products. The service is part of the Oracle Order System, Oracle Customer Management System, and other systems. A security vulnerability exists in Oracle...

CVE-2025-30728: Improper Access Control

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Core. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks...

PT-2025-16454 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other...

CVE-2025-30720: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: Orders. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attac...

WordPress iONE360 configurator plugin <= 2.0.57 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin iONE360 configurator versions = 2.0.57...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: temporal, kubernetes-csi-external-provisioner, cortex, gitness, aws-flb-kinesis, ferretdb, gobuster, kubernetes-event-exporter, kwok, helm-operator, docker-cli, ctop, sbom-scorecard, go-bindata, ytt, crossplane-provider-azure, s5cmd, docker-credential-acr-env,...