Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, have security vulnerabilities. These vulnerabilities stem from a...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

The Oracle MySQL Server, MySQL Cluster versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to gain network access through...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component, which may allow unauthenticated attackers to access through the HTTP network, thereby taking control of MySQL Connectors...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Eclipse ThreadX buffer error vulnerability

A security vulnerability exists in Eclipse ThreadX versions 6.0.1 through 6.5.1.202602a. It arises because the Module Manager object searches only by verifying the length of the search name; it fails to utilize a buffer with a length limit parameter. Under privileged mode, it iterates through...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the system through HTTP network access...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Fabric Layer component, which may allow unauthenticated attackers to access through the HTTP network, potentially gaining control of the Oracle SOA Suit...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control mechanisms, potentially allowing remote attackers to bypass web source policies via specially crafted HTML pages...

Oracle Secure Backup security vulnerability

Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running Oracle Secure Backup, take contro...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data, all data, as well as update,...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, which may allow low-privilege attackers to log in and execute infrastructure...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to take control of Oracle EDI Gateway through HTTP network access...

Oracle Siebel CRM Deployment Security Vulnerabilities

There are security vulnerabilities in Oracle Siebel CRM Deployment from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, and they could allow attackers with high privileges to log in, access the infrastructure, and take control of Oracle Siebe...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component, which may allow unauthenticated attackers to access through the HTTP network and take control of Oracle Agile PLM during user interactions...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component, which may allow attackers with low privileges to gain control of JD Edwards EnterpriseOne Tools through HTTP network access...