Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component. Unauthorized attackers may gain access to the infrastructure and take control of Oracle Business Intelligenc...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, which may allow attackers with low privileges to access through the HTTP network and take control of Oracle Agile...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow logged-in, low-privilege attackers to exploit the system to take control of Oracle Agile Engineering Data Manageme...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper extension access control mechanisms, which may allow remote attackers to disclose sensitive information through specially crafted HTM...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control practices in Ozone, which may allow remote attackers to exploit the system by leaking sensitive information through...

Oracle Inventory Management security vulnerabilities

Oracle Inventory Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle...

Oracle Global Lifecycle Management OPatchAuto security vulnerability

The Oracle Global Lifecycle Management OPatchAuto version 12.2.0.1.16 to 12.2.0.1.52 contains security vulnerabilities. These vulnerabilities stem from issues with the Database extensions component. They may allow attackers with high privileges to log in and execute infrastructure tasks, thereby...

Oracle JD Edwards EnterpriseOne Tools: Vulnerabilities in permission management and access control mechanisms

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow high-privilege attackers to access critical data through the HTTP network, unauthorized access...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of Oracle Payroll...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from issues within the Utility component and may allow attackers with limited privileges to log in to Oracle Solaris and take control of the underlying infrastructure...

Oracle HCM Common Architecture security vulnerabilities

A security vulnerability exists in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control over Oracle HCM Common Architecture via HTTP network access...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, which may allow attackers with low permissions to log in and execute infrastructure tasks. This could lead to...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues within the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTT...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Pasta security vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Pasta through HTTP network access...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...

Oracle Siebel CRM End User permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM for End Users contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Portal Framework component and is difficult to exploit. It may allow unauthenticated attackers to access via the...

Eclipse ThreadX FileX input validation error vulnerability

Versions 6.5.1.202602 and earlier of Eclipse ThreadX FileX contain a security vulnerability. This vulnerability arises when an attacker with control over the FAT image that enables fault tolerance mounts a filesystem, leading to an out-of-bounds heap write during log replay. Both the location and...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...