Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log in and take control of the infrastructure on which the product ...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control practices in Ozone, which may allow remote attackers to exploit the system by leaking sensitive information through...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM Deployment has security vulnerabilities from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to log in and control the infrastructure, thereby taking control of Siebel CRM...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In PDF Export SDK component. It may allow unauthorized attackers to gain access through the HTTP network, thereby taking control of Oracle Outside In Technology when user...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component. They could allow attackers with high privileges to log in to the infrastructure running JD Edwards EnterpriseOne Tools and...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Approval Manager component. Unauthorized attackers may exploit these vulnerabilities to gain access through the HTTP network and take control of Siebe...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. They could allow high-privilege attackers to gain access through the HTTP network and take control of Oracle EDI Gateway...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow low-privilege attackers to gain network access via HTTP, thereby taking control of the Oracle Essbase...

Oracle Java SE permission licensing and access control issues

Oracle Java SE 8u503, 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1 versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from 2D component issues. The vulnerabilities are difficult to exploit, and they may allow unauthenticat...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Diagnostics component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control of Oracle Applications...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Replication...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, have security vulnerabilities. These vulnerabilities stem from a...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. Attackers with low permissions may exploit these vulnerabilities to gain networ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through the HTTP network, allowing PeopleSoft Enterprise PeopleTools to take control o...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component and are difficult to exploit. Unauthenticated attackers may gain control of JD Edwards EnterpriseOne Tools when they ha...

Oracle Mobile Field Service security vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Mobile Field...