Oracle Application Object Library Authorization Vulnerability

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have an authorization issue vulnerability. This vulnerability stems from Core component problems and could allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper ANGLE access control and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with elevated privileges to gain access via the HTTPS network, thereby taking control of Oracle Mobile Field...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component, which may allow attackers with low privileges to gain control of Oracle Business Intelligence...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component. An attacker with high privileges could log in to the infrastructure running this...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow unauthenticated attackers to take control of Workflow through HTTP network access...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Applications Manager through HTTP network access...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component, which may allow unauthenticated attackers to access through the HTTP network, thereby taking control of MySQL Connectors...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper V8 access control mechanisms, which may allow remote attackers to bypass web source policies through specially crafted HTML pages...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle MySQL Server permission and access control issue vulnerability

Vulnerabilities related to permission and access control issues exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1; as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 throu...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow attackers with low privileges to gain control of the Oracle Essbase through HTTP network access, potentially affecting other products as well...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, which may allow attackers with high privileges to log in and access...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow low-privilege attackers to take control of Workflow through HTTP network access...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 19.1.0.0.0 to 19.32.0.0.0, 21.3, 21.23, and 23.4 to 23.26.3.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Server Executable component, which may allow low-privilege attackers to access and control Oracle GoldenGate via an...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...