Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, Apple macOS prior to Golden Gate version 27, Apple macOS prior to Tahoe version 26.7, and Apple VisionOS prior to version 27 have vulnerabilities related to permission licensing and access control. These vulnerabilitie...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

WordPress Booktics authorization issue vulnerability

WordPress Booktics versions 1.0.30 and earlier have a vulnerability related to authorization. This vulnerability arises from the lack of proper authorization, which may allow attackers to exploit incorrect access control security levels...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle Java SE permission licensing and access control issues

In Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products, there are vulnerabilities related to permission management and access control. These vulnerabilities exist in Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions;...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Oracle Service Bus security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Service Bus contain a security vulnerability stemming from issues in the Core component. This vulnerability may allow attackers with low privileges to gain HTTP access and take control of Oracle Service Bus...

Oracle MySQL Connectors permission and access control issue vulnerability

Oracle MySQL Connectors version 26.7.0 contains a vulnerability related to permission and access control issues. This flaw stems from problems within the Connector/Net component, potentially allowing unauthenticated attackers to gain network access via various protocols. Under certain user...

Oracle Application Testing Suite security vulnerabilities

Oracle Application Testing Suite 13.3.0.1 has a security vulnerability. This vulnerability stems from issues with the OpenScript component, and it could allow low-privilege attackers to log in to the Oracle Application Testing Suite and execute infrastructure processes, thereby taking control of...

Oracle Pasta security vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Pasta through HTTP network access...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow attackers with limited privileges to exploit HTTP access to compromise and take control of the Siebel CRM...

Oracle Communications BRM – Elastic Charging Engine Authorization Vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This vulnerability stems from problems with the Cloud native deployment component. These versions are vulnerable to attacks. Unauthenticated attackers can...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM Deployment has security vulnerabilities from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to log in and control the infrastructure, thereby taking control of Siebel CRM...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component, which may allow unauthenticated attackers to gain access via the HTTP network and take control of JD Edwards...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...