Oracle JD Edwards EnterpriseOne Tools Authorization Vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. They may allow unauthorized attackers to access via an HTTPS network, unauthorized creation, deletion, or...

Oracle MySQL Router security vulnerabilities

The Oracle MySQL Router version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Router: General component. They may allow unauthorized attackers to access through an HTTPS network, resulting in unauthorized creation, deletion, or modification of critical...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow unauthorized attackers to access critical data via an HTTPS network, or to access all accessible data...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low permissions to access and take control of Oracle...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with elevated privileges to gain access via the HTTPS network, thereby taking control of Oracle Mobile Field...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, allowing attackers with low permissions to access data through an HTTPS network, thereby enabling...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 19.1.0.0.0 to 19.32.0.0.0, 21.3, 21.23, and 23.4 to 23.26.3.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Server Executable component, which may allow low-privilege attackers to access and control Oracle GoldenGate via an...

Oracle APEX authorization issue vulnerabilities

Versions of Oracle APEX from 24.1.0 to 24.1.21, from 24.2.0 to 24.2.20, and from 26.1.0 to 26.1.4 contain authorization issue vulnerabilities. These vulnerabilities stem from issues with the General component, which may allow unauthenticated attackers to access and take control of Oracle APEX...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services is a middleware tool provided by Oracle Corporation in the United States, which exposes features of the Oracle database to applications through RESTful APIs. There are security vulnerabilities in versions 24.2.0 to 26.1.0 of Oracle REST Data Services. These vulnerabiliti...

Oracle Payroll security vulnerability

Oracle Payroll is a corporate payroll calculation and distribution management system developed by Oracle, a company in the United States. Versions 12.2.3 to 12.2.15 of Oracle Payroll contain security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component,...

PT-2026-37903

Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...

PT-2026-37969

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

CVE-2023-22083

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Web UI. Supported versions that are affected are 9.0-9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise...

Oracle Java SE Security Vulnerability

Oracle Java SE is an Oracle company for the development and deployment of Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in Oracle Java SE for Oracle Java SE versions 8u381, 8u381-perf, 11.0.20, 17.0.8, and 20.0.2, and...

SUSE CVE-2022-21626

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerabili...

OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerabili...

CVE-2021-35666

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: OSSL Module. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle HTTP Server. Successful...