Oracle MySQL Server permission and access control issue vulnerability

Versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Server, as well as versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of Oracle MySQL Cluster, contain a permission and access control vulnerability...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component, which may allow high-privilege attackers to log into the infrastructure where the component runs and take control of JD...

Artifex Software Ghostscript: Permissions, Licenses, and Access Control Vulnerabilities

Artifex Software Ghostscript has vulnerabilities related to permission management and access control. These vulnerabilities stem from insufficient protection for the privileged forceput operation during the .charkeys process. Processing specially crafted PostScript files can bypass the -dSAFER...

Oracle Service Bus permission and access control vulnerabilities

The Oracle Service Bus 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Core components, and they could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of the...

Oracle Service Bus authorization issue vulnerability

Oracle Service Bus versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component problems, and it may allow low-privilege attackers to take control of Oracle Service Bus through HTTP network access...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 25.12 to version 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Workflow component. They require interaction from non-attacker users. This could allow attackers with low permissions to access and take control of...

Oracle Secure Backup security vulnerabilities

Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Device Management and Support component. They may allow low-privilege attackers to log in and take control of Oracle Secure Backup after accessing the...

Oracle HCM Common Architecture security vulnerabilities

Oracle HCM Common Architecture versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle HCM Common Architecture through HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log in and take control of the infrastructure on which the product ...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component, which may allow low-privilege attackers to take control of the Oracle SOA Suite through HTTP network access...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other component, and they could allow attackers with high privileges to log in and execute on the infrastructure, taking control of Oracle Concurrent Processing...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Eclipse ThreadX buffer error vulnerability

A security vulnerability exists in Eclipse ThreadX versions 6.0.1 through 6.5.1.202602a. It arises because the Module Manager object searches only by verifying the length of the search name; it fails to utilize a buffer with a length limit parameter. Under privileged mode, it iterates through...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow unauthenticated attackers to access and control the Oracle Essbase through the TCP network...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may exploit these vulnerabilities by accessing the physical communication segments connected to...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, which may allow attackers with low permissions to log in and execute infrastructure tasks. This could lead to...