Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...

Oracle Database Server security vulnerabilities

A security vulnerability exists in Oracle Database Server versions 23.4.0 through 23.26.3. This vulnerability stems from an issue within the RDBMS component and may allow low-privilege attackers with DBMSVECTOR privileges to gain network access via Oracle Net and take control of the RDBMS...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...

Oracle Access Manager authorization issue vulnerability

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Authentication Engine component, which may allow unauthenticated attackers to access and take control of Oracle Access Manager through the SAML network...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

The Oracle Business Intelligence Enterprise Edition version 12.2.1.4.0 contains a security vulnerability stemming from issues in the Presentation Services component. This vulnerability may allow attackers with limited privileges to log in and take control of the infrastructure running Oracle...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Product Hub through HTTP network access...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Mobil...

WordPress Participants Database Authorization Issue Vulnerability

The WordPress Participants Database versions 2.7.8.5 and earlier have an authorization issue vulnerability. This vulnerability stems from bypassing authorization through user control keys, which may lead to exploitation if the access control security levels are configured improperly...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...

Oracle Call Center Technology security vulnerabilities

Oracle Call Center Technology versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow unauthenticated attackers to access through the RMI network and take control of Oracle Call Center Technology...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the ADP component, which may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorize...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue in the Security component. This vulnerability may allow low-privilege attackers with HTTP network access to take control of Oracle...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow low-privilege attackers to take control of the Oracle Essbase through HTTP network access, and may also significantly affect other products...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 have vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient sandbox restrictions, which may allow applications to access user contact information...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers with low privileges may exploit these vulnerabilities to gain control of Siebel CRM Cloud Applications through HTTP...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle iProcurement security vulnerability

A security vulnerability exists in Oracle iProcurement versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Requisition Management component. It may allow attackers with low privileges to exploit it via network access to the interface, ultimately gaining control over...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues related to the Deployment SEC component and may allow unauthenticated attackers to gain access to the infrastructure hosting JD Edwards EnterpriseOne...