Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM Deployment has security vulnerabilities from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to log into the Siebel CRM Deployment and take control of it...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component. Attackers with low permissions may log in to Applications DBA to execute infrastructure tasks. In som...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. It is possible for attackers with low privileges to gain control of Oracle Essbase through HTTP network access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of Oracle Agile Product Lifecycle Management for Process through...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow low-privilege attackers to gain control over Oracle SOA Suite via HTTP network access, potentially affecting other products as...

Oracle JD Edwards EnterpriseOne Orchestrator: Vulnerabilities in Permission Management and Access Control

Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access to the...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster have security vulnerabilities. These vulnerabilities stem from issues with the Server: Group Replication GCS component. Unauthorized attackers may exploit these vulnerabilities by accessing the physical communication segments connected to the hardware that ru...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS Sequoia 15.8 and Apple macOS Tahoe 26.7 have vulnerabilities related to permission handling and access control. These vulnerabilities stem from inadequate checking mechanisms, which may allow applications to escalate privileges...

Oracle MySQL Server permission and access control issue vulnerability

Oracle MySQL Server versions 9.7.0 through 9.7.3 contain a permission and access control vulnerability stemming from issues in the Server: Optimizer component. This vulnerability may allow low-privilege attackers to gain network access via various protocols, potentially causing MySQL Server and...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component. An attacker with high privileges could log in to the infrastructure running this...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data, all data, as well as update,...

Oracle Cost Management security vulnerability

A security vulnerability exists in Oracle Cost Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Cost Maintenance component and may allow attackers with limited privileges to gain HTTP access and take control of Oracle Cost Management...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component, which may allow unauthenticated attackers to gain access via the HTTP network and take control of JD Edwards...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation SEC component, which may allow low-privilege attackers to access and take control of JD Edwards EnterpriseOne Tools through the JDENET...

Vulnerability related to permission and access control issues in Oracle Partner Management

Versions 12.2.3 through 12.2.15 of Oracle Partner Management contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Internal Operations component. It may allow attackers with limited privileges to access via HTTPS, thereby...