Apple iOS Security Vulnerabilities

Versions of Apple’s operating systems prior to iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 contain security vulnerabilities. These vulnerabilities stem from access control issues, which may allow applications to access sensitive user data...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow low-privilege attackers to gain network access via HTTP, thereby taking control of the Oracle Essbase...

Oracle Java SE permission licensing and access control issues

Oracle Java SE 8u503, 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1 versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from 2D component issues. The vulnerabilities are difficult to exploit, and they may allow unauthenticat...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerability

Version 9.2 of Oracle PeopleSoft Enterprise SCM Strategic Sourcing contains a security vulnerability stemming from issues within the Strategic Sourcing component. This vulnerability may allow attackers with limited privileges to gain network access and take control of PeopleSoft Enterprise SCM...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle Applications...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Replication...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, have security vulnerabilities. These vulnerabilities stem from a...

Oracle MySQL Server security vulnerabilities

A security vulnerability exists in Oracle MySQL Server versions 26.7.0 through 26.7.1. This vulnerability stems from issues within the Server: Optimizer component, potentially allowing highly privileged attackers to exploit it via various protocols over the network, thereby gaining control of...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. It is possible for attackers with low privileges to gain control of Oracle Essbase through HTTP network access...

Oracle Siebel Apps – Life Sciences security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the eDetailing component, which may allow low-privilege attackers to access the system through network connections, thereby taking control of Siebel Apps – Life Sciences...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. Attackers with low permissions may exploit these vulnerabilities to gain networ...

Oracle WebLogic Server authorization issue vulnerability

Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of Oracle WebLogic Server contain an authorization issue vulnerability. This vulnerability stems from a Core component problem and may allow unauthenticated attackers to gain HTTP network access and take control of the Oracle WebLogic...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component, which may allow high-privilege attackers to log into the infrastructure where the component runs and take control of JD...

Artifex Software Ghostscript: Permissions, Licenses, and Access Control Vulnerabilities

Artifex Software Ghostscript has vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient protection for the privileged forceput operation during the .charkeys process. Processing specially crafted PostScript files can bypass the -dSAFER...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component, and they could allow low-privilege attackers to log in and execute on the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through the HTTP network, allowing PeopleSoft Enterprise PeopleTools to take control o...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Installation Security component and may allow unauthenticated attackers to gain access via HTTP, thereby taking control of JD Edwards...