Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle Siebel Apps – Life Sciences security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the eDetailing component, which may allow low-privilege attackers to access the system through network connections, thereby taking control of Siebel Apps – Life Sciences...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low permissions to access and take control of Oracle...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle Java SE permission licensing and access control issues

Oracle Java SE 8u503, 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1 versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from 2D component issues. The vulnerabilities are difficult to exploit, and they may allow unauthenticat...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to take control of JD Edwards EnterpriseOne Tools through HTTP network...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 versions have security vulnerabilities. These vulnerabilities stem from issues with the BPM Composer component, which may allow attackers with low privileges to gain control of the Oracle Business Process Management Suite through...

Oracle Sales Foundation security vulnerabilities

The Oracle Sales Foundation versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Security API component, which may allow low-privilege attackers to access through the HTTP network and take control of the Oracle Sales Foundation...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Unauthorized attackers may exploit these vulnerabilities to gain control of the Oracle SOA Suite through HTTP network access. This could...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Attackers with low privileges may exploit these vulnerabilities to gain control of Oracle SOA Suite through HTTP network access. This could...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 19.1.0.0.0 to 19.32.0.0.0, 21.3, 21.23, and 23.4 to 23.26.3.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Server Executable component, which may allow low-privilege attackers to access and control Oracle GoldenGate via an...

Oracle WebLogic Server authorization issue vulnerability

Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of Oracle WebLogic Server contain an authorization issue vulnerability. This vulnerability stems from a Core component problem and may allow unauthenticated attackers to gain HTTP network access and take control of the Oracle WebLogic...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of Oracl...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to gain HTTP access and take control of Oracle Outside In Technology...

Oracle MySQL Server permission and access control issue vulnerability

Versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Server, as well as versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Cluster, contain a permission and access control vulnerability...

Oracle MySQL Connectors permission and access control issue vulnerability

Oracle MySQL Connectors version 26.7.0 contains a vulnerability related to permission and access control issues. This flaw stems from problems within the Connector/Net component, potentially allowing unauthenticated attackers to gain network access via various protocols. Under certain user...

Oracle MySQL Server security vulnerabilities

A security vulnerability exists in Oracle MySQL Server versions 26.7.0 through 26.7.1. This vulnerability stems from issues within the Server: Optimizer component, potentially allowing highly privileged attackers to exploit it via various protocols over the network, thereby gaining control of...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Replication...