Oracle Identity Manager Connector authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager Connector contain an authorization issue vulnerability. This vulnerability stems from issues within the LDAP Gateway component and may allow unauthenticated attackers to access the LDAP network, potentially leading to the takeover of...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow low-privilege attackers to access critical data or all accessible data through the LDAP network, without proper...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the LDAP network, allowing them to access critical data or all accessible data...

External Control of System or Configuration Setting

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to External Control of System or Configuration Setting in the LdapNetworkConnector process. An attacker can instantiate unauthorized transports and...

CVE-2026-49434 Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: LdapNetworkConnector instantiates denied transports and a remote-properties broker

Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All. An attacker that has access to publish or modify entries in LDAP that match the configured searchBase and searchFilter can instantiate denied transports inside the broker JVM. This can be used...

KLA11142 DoS and OSI vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware vCenter Server and vSphere Web Client. Malicious users can exploit these vulnerabilities to cause denial of service or disclose sensetive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in VMware...