Lucene search
+L

5062 matches found

Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92806

Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.01.0.0.0 Description An issue in the BI Platform Security component allows an unauthenticated attacker with network access via SOAP to...

8.6CVSS5.8AI score0.00336EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•29 views

PT-2026-92677

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel CRM End User. Successful attacks of this...

9.1CVSS5.6AI score0.00425EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•12 views

CVE-2026-83287: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Presentation Services. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access vi...

7.7CVSS5.7AI score0.00371EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-83308: Improper Access Control

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle B...

8.1CVSS5.7AI score0.00378EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•27 views

PT-2026-92477

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle...

6.5CVSS5.6AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•23 views

PT-2026-92856

Name of the Vulnerable Software and Affected Versions Oracle Web Services Manager versions 12.2.1.4.0 Oracle Web Services Manager versions 14.1.2.0.0 Description A flaw in the Web Services Security component allows an unauthenticated attacker with network access via SOAP to compromise the system...

7.4CVSS5.7AI score0.00363EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-83314: Improper Access Control

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...

8.1CVSS5.7AI score0.00378EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•16 views

CVE-2026-45052: Improper Authorization

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenticated remote requests to write persistent entries through SOAPReceiver and DiscoveryService into a user's Liberty Discovery store and the shared root-realm...

9.3CVSS6AI score0.00765EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•10 views

CVE-2026-83154: Improper Authentication

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Open UI. Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Siebel CRM End User. Successful attacks of this...

9.1CVSS5.7AI score0.00425EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-83284: Improper Access Control

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle ...

8.6CVSS5.7AI score0.00336EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•28 views

PT-2026-92811

Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description An issue exists in the Analyti...

7.5CVSS5.8AI score0.00323EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•12 views

CVE-2026-83289: Improper Privilege Management

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Web General. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access...

7.5CVSS5.7AI score0.00323EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-83311: Improper Access Control

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle B...

8.5CVSS5.7AI score0.0029EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/14 8:16 p.m.•15 views

CVE-2026-15887

IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests...

5.4CVSS0.00182EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/14 7:58 p.m.•51 views

CVE-2026-15887

IBM WebSphere Application Server versions 9.0.0.0 through 9.0.5.28 and 8.5.0.0 through 8.5.5.30 are affected by a blind server-side request forgery (SSRF) vulnerability (CWE-918) triggered when processing SOAP requests . An attacker with low privileges can exploit this over the network with low c...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/14 7:58 p.m.•17 views

EUVD-2026-78056

IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/14 7:58 p.m.•48 views

CVE-2026-15887 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests...

5.4CVSS0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/14 7:58 p.m.•18 views

CVE-2026-15887 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•17 views

Astra Linux – Vulnerability in PHP 8.1, PHP 7.3

In PHP versions 8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, and 8.4. before 8.4.10, when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefixes may lead to null pointer dereferencing. This can result in crashes and affect the availability of the target server...

5.9CVSS6.8AI score0.0099EPSS
SaveExploits1References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/09/14 1:55 a.m.•20 views

Vulnerability in Cosminexus Component Container

Overview Cosminexus Service Coordinator, which uses the SOAP communication infrastructure of Cosminexus Component Container, contains an XXE XML External Entity vulnerability in user-defined reception services SOAP reception services or SOAP adapters operating in SOAP 1.1 mode. Impact Regarding t...

7.4CVSS6.1AI score0.00406EPSS
SaveExploits0References2
Rows per page
Query Builder