CVE-2025-53057: Improper Access Control

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracl...

CVE-2025-53056: Improper Authorization

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Object and Environment Tech. Supported versions that are affected are 9.2.0.0-9.2.9.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2025-53055: Out-of-bounds Read

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.60, 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2025-53054: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2025-53053: Uncontrolled Resource Consumption

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2025-53052: Improper Access Control

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow...

CVE-2025-61749: Improper Access Control

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Unified Audit. Successful attacks of...

PT-2025-42975

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description An easily exploitable issue exists in the Oracle Scripting product of Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can compromise Oracle...

PT-2025-42956

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description A security issue exists in the PeopleSoft Enterprise PeopleTools product, specifically within the OpenSearch Dashboards component. A high-privileged attacker with network access via HTTP...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in Oracle Financial Services Analytical Applications Infrastructure versions...

PT-2025-42984

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.7.3.0.0 Description An issue exists in Oracle Essbase, specifically within the Essbase Web Platform component. A low-privileged attacker with network access via HTTP can compromise the system. Successful exploitation...

PT-2025-42973

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 Description An easily exploitable issue exists in the Oracle...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, supplier relationship management, and other capabilities.PeopleSoft Enterprise PeopleTools is one of the tools and...

PT-2025-51503

Уязвимость компонента PIA Core Technology пакета бизнес-приложений Oracle PeopleSoft Enterprise PeopleTools связана с нарушением начальной границы буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на чтение, изменение и удаление данных...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, supplier relationship management, and other capabilities.PeopleSoft Enterprise PeopleTools is one of the tools and...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

PT-2025-42940

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.14 Description An issue exists in the Oracle Product Hub component of Oracle E-Business Suite that allows a low-privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2025-42983

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 9.2 Description A flaw exists within the PeopleSoft Enterprise FIN Payables component that could allow a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation may lead...

Oracle Virtualization 安全漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software architecture from applications to disks, enabling virtualization from the desktop to the data center. A security vulnerability...

PT-2025-42958

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description A security issue exists within the PeopleSoft Enterprise PeopleTools product, specifically in the PIA Core Technology component. A high-privileged attacker with network access via HTTP c...