Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Capacity through HTTP network access...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability, which stems from issues with the Utility component. This vulnerability may allow unauthenticated attackers to access the system via the TCP network and take control of Oracle Solaris...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, and it could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle Business...

LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Push Notifications component, which may allow attackers with high privileges to access the hardware’s physical communication layer, thereby taking control...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Image Export SDK component. This vulnerability may allow unauthenticated attackers to log in, execute infrastructure tasks, and require user interaction. Successful...

Oracle Capacity security vulnerability

A security vulnerability exists in Oracle Capacity versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Capacity via HTTP network access...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component, and they could allow low-privilege attackers to take control of the Oracle E-Business Suite Integrated SOA Gateway...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Mobile Field...

Oracle OLAP security vulnerabilities

Security vulnerabilities exist in Oracle OLAP versions from 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3. These vulnerabilities arise because low-privilege attackers possessing DBMSAW privileges can access the Oracle Net network, potentially leading to full control over Oracle OLAP...

Oracle Java SE permission and access control issue vulnerability

Security vulnerabilities exist in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, and 21.3.19.1.1. These vulnerabilities stem from improper access control in the 2D component, potentially allowing unauthenticat...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 contains a security vulnerability stemming from issues in the Presentation Services component. This vulnerability may allow attackers with limited privileges to log in and take control of the infrastructure running Oracle...

WordPress Participants Database Authorization Issue Vulnerability

The WordPress Participants Database versions 2.7.8.5 and earlier have an authorization issue vulnerability. This vulnerability stems from bypassing authorization through user control keys, which may lead to exploitation if the access control security levels are configured improperly...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...