3031 matches found
The vulnerability of the XML Publisher component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain unauthorized access to protected information.
The vulnerability of the XML Publisher component in the Oracle PeopleSoft Enterprise PeopleTools business application suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
Vulnerabilities fixed in Oracle Fusion Middleware
Oracle has fixed vulnerabilities in the following Fusion Middleware products: BI Publisher Business Intelligence Enterprise Edition Coherence Global Lifecycle Management NextGen OUI Framework HTTP Server Managed File Transfer Middleware Common Libraries and Tools Security Service SOA Suite...
CVE-2022-21523
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...
CVE-2022-21523
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...
CVE-2022-21521
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-21521
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-21521
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-21523
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...
Code injection
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
Design/Logic Flaw
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...
CVE-2022-21523
Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...
CVE-2022-21523
CVE-2022-21523 affects Oracle Fusion Middleware's Oracle BI Publisher (BI Publisher Security). Affected versions are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows a low-privileged attacker with network access via HTTP to read a subset of Oracle BI Publisher data. The CVSS base score is 4.3 ...
CVE-2022-21521
CVE-2022-21521 affects Oracle PeopleSoft Enterprise PeopleTools (XML Publisher) with vulnerable versions 8.58 and 8.59. The issue allows a high-privilege attacker with network access over HTTP to compromise PeopleSoft Enterprise PeopleTools and potentially access all data. Public sources cite a ...
CVE-2022-21521
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2022-21521
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: XML Publisher. Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
Oracle Fusion Middleware和Oracle BI Publisher 输入验证错误漏洞
Oracle Fusion Middleware and Oracle BI Publisher are both products of Oracle Corporation.Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments. The platform provides middleware, software collections, and other capabilities.Service Bus is one of t...
SAP BusinessObjects BW Publisher Service Elevation of Privilege Vulnerability
SAP BusinessObjects BW Publisher Service is a model-driven data warehouse product from SAP Germany. An elevation of privilege vulnerability exists in versions 420 and 430 of the SAP BusinessObjects BW Publisher Service, which stems from the use of search paths that contain un-referenced elements,...
CVE-2022-31591
SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service...
CVE-2022-31591
SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service...
CVE-2022-31591
SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service...