75 matches found
CVE-2023-22117
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.3, 12.4, 14.0-14.3 and 14.5-14.7. Easily exploitable vulnerability allows low privileged attacker with network access via...
CVE-2022-21347
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2021-2181
Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite component: Attachments. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...
IBM Cognos Controller Elevation of Privilege Vulnerability
IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM in the United States. The product features process automation, financial audit control, and the creation and management of financial reports. IBM Cognos Controller suffers from a security vulnerability that...
CVE-2020-14717
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
PT-2019-3659 · Oracle +7 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the Server: Optimizer component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...
mysql: InnoDB unspecified vulnerability (CPU Jul 2019)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
Oracle E-Business Suite Component Access Control Error Vulnerability (CNVD-2019-28435)
Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...
Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2019-37393)
Oracle Food and Beverage Applications is a suite of food and beverage sales management solutions from Oracle. Hospitality Simphony is one of the cloud-based hospitality components. A security vulnerability exists in Oracle Hospitality Simphony 2.10. An attacker could exploit the vulnerability to...
CVE-2018-3130
Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products subcomponent: Application Portal. The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
Unspecified Vulnerability in Oracle Agile PLM (CNVD-2018-01957)
Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...
CVE-2017-3595
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Advanced UI. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP t...
CVE-2017-3364
Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
DMXReady Document Library Manager 1.1 - Contents Change
Title : DMXReady Document Library Manager http://target/path//applications/DocumentLibraryManager/incdocumentlibrarymanager.asp Edit - http://target/path//admin/DocumentLibraryManager/addcategory.asp : milw0rm.com 2009-01-14...
CVE-2006-1705: Undefined Security Weakness
Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view...