Lucene search
+L

38 matches found

NVD
NVD
•added 2026/08/18 9:17 p.m.•15 views

CVE-2026-70704

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading...

8.1CVSS0.00392EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/18 9:01 p.m.•14 views

EUVD-2026-61659

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading...

8.1CVSS5.3AI score0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•2 views

CVE-2026-70704: Improper Access Control

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading...

8.1CVSS5.7AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•19 views

PT-2026-77703

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trading...

8.1CVSS5.2AI score0.00392EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/22 12:31 a.m.•17 views

EUVD-2026-47071

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

7.2CVSS7.1AI score0.00486EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 10:18 p.m.•16 views

CVE-2026-60784

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trading Community...

8.1CVSS0.00362EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/21 10:18 p.m.•15 views

CVE-2026-60734

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

7.2CVSS0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-60784: Improper Access Control

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trading Community...

8.1CVSS5.7AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•25 views

PT-2026-62778

Name of the Vulnerable Software and Affected Versions Oracle Trading Community versions 12.2.3 through 12.2.15 Description An issue exists in the Party Search UI component of the Oracle Trading Community product. A low privileged attacker with network access via HTTP can exploit this flaw to...

8.1CVSS7.1AI score0.00362EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•1 views

CVE-2026-60734: Improper Access Control

Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite component: Party Search UI. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Trading Communit...

7.2CVSS5.7AI score0.00486EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/12 3:16 a.m.•28 views

CVE-2026-34258

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS0.00322EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/12 2:19 a.m.•60 views

CVE-2026-34258 Content Spoofing vulnerability in SAPUI5 (Search UI)

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS0.00322EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/12 2:19 a.m.•38 views

CVE-2026-34258 Content Spoofing vulnerability in SAPUI5 (Search UI)

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS5.8AI score0.00322EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•43 views

PT-2026-39919

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS5.8AI score0.00322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•1 views

CVE-2026-34258: User Interface (UI) Misrepresentation of Critical Information

SAPUI5 Search UI allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low...

4.7CVSS5.8AI score0.00322EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-18881

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00403EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in answers-search-ui (npm)

The package answers-search-ui was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-14555 Malicious code in answers-search-ui (npm)

The package answers-search-ui was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/08 2:07 p.m.•12 views

Malicious code in vue-search-ui-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eba39e62ce67a90fdd330c95bec218d75c2ddbb0e16d24625081c96a115a046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2025/02/08 2:07 p.m.•12 views

MAL-2025-1266 Malicious code in vue-search-ui-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eba39e62ce67a90fdd330c95bec218d75c2ddbb0e16d24625081c96a115a046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder