Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Image Export SDK component. This vulnerability may allow unauthenticated attackers to log in, execute infrastructure tasks, and require user interaction. Successful...

Oracle OLAP security vulnerabilities

Security vulnerabilities exist in Oracle OLAP versions from 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3. These vulnerabilities arise because low-privilege attackers possessing DBMSAW privileges can access the Oracle Net network, potentially leading to full control over Oracle OLAP...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Database Actions component and may allow highly privileged attackers to gain HTTP network access, potentially...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Image Packaging System component, which may allow unauthenticated attackers to gain control of Oracle Solaris through HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow unauthenticated attackers to access the system via the SMTP network and take control of JD...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s operating systems and devices that are not up to version 26.7 including Apple iOS before version 26.7, Apple iPadOS before version 26.7, Apple iOS 27 before version 27, Apple iPadOS 27 before version 27, Apple macOS Golden Gate 27 before version 27, and Apple VisionOS 27 befor...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle Siebel CRM Deployment: Permissions, Licensing, and Access Control Vulnerabilities

The Oracle Siebel CRM Deployment from version 17.0 to 26.9 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or gain full access to all da...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Mobile Field...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component, which may allow users with lower permissions who are logged in to take control of Applications DBA...

Oracle EDI Gateway: Vulnerabilities in permission management and access control mechanisms

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to gain control of Oracle EDI Gateway throug...

Oracle WebCenter Sites authorization issue vulnerability

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the WebCenter Sites component, which may allow unauthenticated attackers to gain control of Oracle WebCenter Sites through HTTP network access...

Oracle Application Testing Suite security vulnerabilities

Oracle Application Testing Suite 13.3.0.1 has a security vulnerability. This vulnerability stems from issues with the OpenScript component, and it could allow low-privilege attackers to log in to the Oracle Application Testing Suite and execute infrastructure processes, thereby taking control of...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. Attackers with low privileges can exploit this vulnerability through network access via HTTP. However, they require user...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers to access data through the HTTP network, requiring user...

Oracle Solaris Permission Licensing and Access Control Vulnerabilities

Oracle Solaris 11.4 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the X Window System components, which may allow attackers with low privileges to log into infrastructure running Oracle Solaris and carry out attacks...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to gain control of Oracle Mobile Field Service...