Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow attackers with limited privileges to exploit HTTP access to compromise and take control of the Siebel CRM...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control in DevTools, which may allow remote attackers to disclose sensitive information through specially crafted HTML pages...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper extension access control mechanisms, which may allow remote attackers to disclose sensitive information through specially crafted HTM...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component, and they could allow low-privilege attackers to log in and execute on the...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via an HTT...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with limited privileges to gain access via HTTP, thereby taking control of Oracle Mobile Field Service...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM Deployment has security vulnerabilities from version 17.0 to 26.9. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to log into the Siebel CRM Deployment and take control of it...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component. Attackers with low permissions may log in to Applications DBA to execute infrastructure tasks. In som...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. It is possible for attackers with low privileges to gain control of Oracle Essbase through HTTP network access...

Oracle JD Edwards EnterpriseOne Orchestrator: Vulnerabilities in Permission Management and Access Control

Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access to the...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS Sequoia 15.8 and Apple macOS Tahoe 26.7 have vulnerabilities related to permission handling and access control. These vulnerabilities stem from inadequate checking mechanisms, which may allow applications to escalate privileges...

Oracle MySQL Server permission and access control issue vulnerability

Oracle MySQL Server versions 9.7.0 through 9.7.3 contain a permission and access control vulnerability stemming from issues in the Server: Optimizer component. This vulnerability may allow low-privilege attackers to gain network access via various protocols, potentially causing MySQL Server and...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

Versions of Oracle MySQL Server from 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as Oracle MySQL Cluster from 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have vulnerabilities related to permission licensing and access control. These vulnerabilities...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data, all data, as well as update,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component, which may allow unauthenticated attackers to gain access via the HTTP network and take control of JD Edwards...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation SEC component, which may allow low-privilege attackers to access and take control of JD Edwards EnterpriseOne Tools through the JDENET...