Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow attackers with low privileges to gain control of the Oracle Essbase through HTTP network access, potentially affecting other products as well...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, which may allow attackers with high privileges to log in and access...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow low-privilege attackers to take control of Workflow through HTTP network access...

Oracle GoldenGate security vulnerabilities

Oracle GoldenGate versions 19.1.0.0.0 to 19.32.0.0.0, 21.3, 21.23, and 23.4 to 23.26.3.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Admin Server Executable component, which may allow low-privilege attackers to access and control Oracle GoldenGate via an...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...

Oracle Secure Backup security vulnerability

Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running Oracle Secure Backup, take contro...

Oracle Access Manager authorization issue vulnerability

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Authentication Engine component, which may allow unauthenticated attackers to access and take control of Oracle Access Manager through the SAML network...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue in the Security component. This vulnerability may allow low-privilege attackers with HTTP network access to take control of Oracle...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Payroll through HTTP network access...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks,...

Oracle Call Center Technology security vulnerabilities

Oracle Call Center Technology versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow unauthenticated attackers to access through the RMI network and take control of Oracle Call Center Technology...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component. Unauthorized attackers may be able to log into the infrastructure where PeopleSoft Enterprise PeopleTools is located, and potentially take...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and control Oracle Mobile Field Service via an HTTPS network...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the ADP component, which may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorize...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Oracle Partner Management versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, allowing attackers with low permissions to access critical data or all accessible data via t...

Python Packaging Authority virtualenv permission and access control issue vulnerability

The Python Packaging Authority identifies a permission and access control vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises when the app-data replication seeder uses shutil.copy to copy cached package files to subsequent environments; the permission mode of the sour...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS prior to Golden Gate 27, Apple macOS Sequoia prior to 15.8, and Apple macOS Tahoe prior to 26.7 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow applications to acce...

Oracle Communications BRM – Elastic Charging Engine Authorization Vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This vulnerability stems from problems with the Cloud native deployment component. These versions are vulnerable to attacks. Unauthenticated attackers can...