CVE-2026-21962-o

CVE-2026-21962 It is my first CVSS 10.0 CVE! 👍✅💯㊗️🀄️🈵 Summary Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. IMPORTANT: Message from orignal Finder Consider the potential damage to...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP network access and user...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain access to Oracle Enterprise Manager for Siebel via HTTP network access...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access data via the HTTP network, enabling unauthorized access to certain accessible data...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow low-privilege attackers to take control of the Oracle Essbase through HTTP network access, and may also significantly affect other products...

Oracle Service Bus security vulnerabilities

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components, which may allow unauthenticated attackers to access through the HTTP network, causing the service to become suspended or crash frequently...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers with low privileges may exploit these vulnerabilities to gain control of Siebel CRM Cloud Applications through HTTP...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, enabling unauthorized access to key data or full access to all data accessib...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to access through the HTTP network, resulting in the takeover of Oracle...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Multichannel Framework component, which may allow high-privilege attackers to take control of PeopleSoft Enterprise PeopleTools through HTTP network access...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Database Actions component and may allow highly privileged attackers to gain HTTP network access, potentially...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. Unauthorized attackers may gain access through HTTP network interactions and user interactions,...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow low-privilege attackers to take control of Oracle Solaris through HTTP network access...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access through the HTTP network, resulting in certain denial-of-service attacks...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...