CVE-2023-21853

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Synchronization. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field...

CVE-2019-2828

Vulnerability in the Oracle Field Service component of Oracle E-Business Suite subcomponent: Wireless. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2021-35570

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite component: Admin UI. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle Siebel Server (July 2022 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by a vulnerability as referenced in the July 2022 CPU advisory. - Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM component: Smart Answer Apache PDFBox. Supported versions that are affected a...

Oracle Siebel CRM (October 2017 CPU)

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2017 CPU advisory. - Vulnerability in the Siebel Apps - Field Service component of Oracle Siebel CRM subcomponent: Smart Answer Python. Supported versions that are...

The vulnerability of the Field Service Engineer Portal component of the Oracle Field Service management platform allows a malicious individual to access, modify, add, and delete data. This component is part of the Oracle E-Business Suite, which is used for automating business processes in enterprises.

The vulnerability of the Field Service Engineer Portal component of the Oracle Field Service management platform, part of the Oracle E-Business Suite, is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, and delete data using th...

CVE-2024-21271

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Field Service Engineer Portal. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field...

CVE-2024-21271

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Field Service Engineer Portal. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field...

CVE-2024-21271

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Field Service Engineer Portal. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field...

CVE-2024-21271

CVE-2024-21271 affects Oracle E-Business Suite, Oracle Field Service’s Field Service Engineer Portal (versions 12.2.3–12.2.13). The underlying issue is an authorization flaw that allows a low-privileged, networked attacker (HTTP) to create, delete, or modify data in Oracle Field Service, with res...

CVE-2024-21271: Incorrect Authorization

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Field Service Engineer Portal. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Field Service versions 12.2.3...

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 allows a malicious individual to escalate their privileges.

The vulnerability of the Dynamics 365 Field Service application for resource planning in Microsoft Dynamics 365 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

KLA71258 PE vulnerability in Microsoft Dynamics

An elevation of privilege was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-38182 Exploitation Related products Microsoft-Dynamics-365 CVE list CVE-2024-38182 critical Solution Install necessary updates from the KB...

CVE-2024-21394

Dynamics 365 Field Service Spoofing Vulnerability...

CVE-2024-21394

Dynamics 365 Field Service Spoofing Vulnerability...

Spoofing

Dynamics 365 Field Service Spoofing Vulnerability...

CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability

...

CVE-2024-21394 Dynamics 365 Field Service Spoofing Vulnerability

...

CVE-2024-21394

CVE-2024-21394 is a spoofing vulnerability in Microsoft Dynamics 365 Field Service (on-premises) where an attacker can remotely spoof the user interface. The CVSS 3.1 vector indicates network access, low attack complexity, low privileges required, but user interaction is needed, with confidential...