CVE-2025-21526

CVE-2025-21526 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access) with affected versions 20.12.1.0–20.12.21.5, 21.12.1.0–21.12.20.0, 22.12.1.0–22.12.16.0 and 23.12.1.0–23.12.10.0. The vulnerability can be exploited by a low-privilege, network-accessing attacker via H...

CVE-2025-21524

CVE-2025-21524 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Monitoring and Diagnostics SEC component. Affected are versions prior to 9.2.9.0; an unauthenticated attacker with network access over HTTP can compromise JD Edwards EnterpriseOne Tools, potentially taking over the too...

CVE-2025-21520

...

CVE-2025-21521

CVE-2025-21521 concerns Oracle MySQL Server (Server: Thread Pooling). Affected: MySQL Server versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by an unauthenticated attacker who can access the server over multiple network protocols, potentia...

CVE-2025-21519

CVE-2025-21519 affects Oracle MySQL Server across multiple lines of product/version targets: 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability targets the Server: Security: Privileges area and is described as a difficult-to-exploit flaw that would allow a high-privil...

CVE-2025-21514

...

CVE-2025-21514

CVE-2025-21514 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). The vulnerability stems from insufficient input validation in the Web Runtime SEC component, allowing an unauthenticated attacker with network access via HTTP to read a subset of accessible data. Affected product/vers...

CVE-2025-21515

CVE-2025-21515 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component, affected in versions before 9.2.9.0. The vulnerability allows a low-privileged attacker with network access over HTTP to takeover JD Edwards EnterpriseOne Tools, with CVSS v3.1 base score 8....

CVE-2025-21511

...

CVE-2025-21513

...

CVE-2025-21506

CVE-2025-21506 affects Oracle E-Business Suite Project Foundation (Technology Foundation) with affected 12.2.3–12.2.13. Low-privileged, network-access attacker over HTTP can lead to unauthorized creation, deletion/modification of data or full data access. CVSSv3.1 base score 8.1 (Confidentiality/...

CVE-2025-21501

CVE-2025-21501 is a vulnerability in Oracle MySQL’s Server: Optimizer component affecting MySQL Server versions 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The issue allows low-privilege, network-access attackers to cause a hang or frequent crash (availability impact: high), i.e...

CVE-2025-21503

CVE-2025-21503 is a MySQL Server InnoDB vulnerability affecting Oracle MySQL. Affected: InnoDB component in versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. Description from connected advisories: exploitation can be network-accessible via multiple protocols and may cause the serve...

CVE-2025-21497

The CVE-2025-21497 affects Oracle MySQL Server (InnoDB). Affected: 8.0.40 and prior, 8.4.3 and prior, 9.1.0 and prior. An attacker with network access and high privileges can cause a hang or crash (DoS) and may perform unauthorized updates/inserts/deletes on MySQL data. CVSS v3.1 base score 5.5 (...

CVE-2025-21498

CVE-2025-21498 affects Oracle HTTP Server (Oracle Fusion Middleware Core) with 12.2.1.4.0. The vulnerability allows an unauthenticated attacker over HTTP to read a subset of Oracle HTTP Server data. CVSS 3.1 base score is 5.3 (Confidentiality only), with network attack vector and no user interact...

CVE-2025-21495

...

CVE-2025-21494

...

CVE-2025-21493

...

CVE-2025-21490

...

CVE-2025-24457

creationtimestamp| type| source ---|---|--- 2025-01-21 18:14:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113867704426950328 2025-01-21 18:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhkiblrd27 2025-01-21 20:19:09+00:00| seen|...