Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Replication...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper extension access control mechanisms, which may allow remote attackers to disclose sensitive information through specially crafted HTM...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component, which may allow low-privilege attackers to take control of Oracle SOA Suite through various protocols over the network...

Oracle Service Bus permission and access control vulnerabilities

The Oracle Service Bus 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Core components, and they could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Multichannel Framework component, which may allow high-privilege attackers to take control of PeopleSoft Enterprise PeopleTools through HTTP network access...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component. They may allow low-privilege attackers to log in and execute infrastructure tasks. This could lead to...

Oracle iProcurement security vulnerabilities

Oracle iProcurement versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the E-Content Manager Catalog component. They could allow high-privilege attackers to take control of iProcurement through HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component, and they could allow low-privilege attackers to access and take control of JD Edwards EnterpriseOne Tools through the...

Oracle Sales Foundation security vulnerabilities

The Oracle Sales Foundation versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Security API component, which may allow low-privilege attackers to access through the HTTP network and take control of the Oracle Sales Foundation...

Oracle Application Testing Suite security vulnerabilities

Oracle Application Testing Suite 13.3.0.1 has a security vulnerability. This vulnerability stems from issues with the OpenScript component, and it could allow low-privilege attackers to log in to the Oracle Application Testing Suite and execute infrastructure processes, thereby taking control of...

Oracle Siebel Apps – Life Sciences security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the eDetailing component, which may allow low-privilege attackers to access the system through network connections, thereby taking control of Siebel Apps – Life Sciences...

Oracle Secure Backup security vulnerabilities

Oracle Secure Backup versions 19.1.0.0.0 and 19.1.0.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Device Management and Support component. They may allow low-privilege attackers to log in and take control of Oracle Secure Backup after accessing the...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to take control of Oracle EDI Gateway through HTTP network access...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

Oracle JD Edwards EnterpriseOne Tools: Vulnerabilities in permission management and access control mechanisms

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow high-privilege attackers to access critical data through the HTTP network, unauthorized access...

Oracle Pasta security vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Pasta through HTTP network access...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerability

Version 9.2 of Oracle PeopleSoft Enterprise SCM Strategic Sourcing contains a security vulnerability stemming from issues within the Strategic Sourcing component. This vulnerability may allow attackers with limited privileges to gain network access and take control of PeopleSoft Enterprise SCM...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...