302 matches found
CVE-2026-118170
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component and are difficult to exploit. Unauthenticated attackers can log in and execute actions on the infrastructure, potentially damaging...
Oracle Trusted Answer Search security vulnerability
Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. Exploited by attackers with low privileges, this vulnerability allows them to log in and execute infrastructure tasks requiring user interaction. It may lead to...
Oracle Siebel Apps - Financial Services security vulnerabilities
Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Financial Accounts component. This vulnerability may allow unauthenticated attackers to gain HTTP access, leading to unauthorized access to critical data or all accessible data, as well as...
Oracle WebCenter Content security vulnerability
The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates, insert or delete...
Oracle Agile PLM security vulnerability
Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...
Oracle Java SE security vulnerabilities
Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...
Oracle Java SE security vulnerabilities
Oracle Java SE versions 21.0.12.1, 25.0.4.1, and 27 have security vulnerabilities. These vulnerabilities stem from issues with the Compiler component. Unauthorized attackers may gain network access through various protocols, resulting in unauthorized updates, insertion of or deletion of certain...
Oracle EDI Gateway security vulnerabilities
Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the EDI component. An attacker with low privileges and who can access via HTTP may be able to compromise the Oracle EDI Gateway and affect other products. This could result in...
Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland security vulnerability
Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 contains a security vulnerability stemming from issues within the Global Payroll for Switzerland component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, perform unauthorized...
Oracle Java SE security vulnerabilities
Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the JSSE component and...
Oracle Java SE security vulnerabilities
Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...
Oracle Siebel Apps – Marketing Cross-site Request Forgery Vulnerability
Oracle Siebel Apps – Versions 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. After user interaction, unauthorized updates, insertions, or deletion...
Oracle Siebel CRM End User Authorization Vulnerability
Oracle Siebel CRM End User versions 17.0 to 26.9 have authorization issues. This vulnerability stems from Open UI components, allowing unauthorized attackers to access through the HTTP network and perform unauthorized updates, insertions, or deletions on certain accessible data...
Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities
Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...
Oracle Siebel CRM Deployment security vulnerability
A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access. They may then make unauthorized updates, insert, or dele...
Oracle Agile Product Lifecycle Management For Process security vulnerabilities
Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...
Oracle Enterprise Manager Base Platform security vulnerabilities
Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. They may allow unauthenticated attackers to access through the HTTP network, resulting in unauthorized updates, insertion of ...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Application Server - JRE component. Unauthorized attackers may gain access through an SSH network, allowing them to perform unauthorized updates, insertion...
Oracle Timesten In-memory Database security vulnerability
A security vulnerability exists in Oracle Timesten In-memory Database versions 26.1 through 26.1.1.3.0. This vulnerability stems from issues within the TimesTen IMDB component and is difficult to exploit. Privileged attackers who gain access to the infrastructure can perform unauthorized updates,...