LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

Oracle Call Center Technology security vulnerabilities

Oracle Call Center Technology versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow unauthenticated attackers to access through the RMI network and take control of Oracle Call Center Technology...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and control Oracle Mobile Field Service via an HTTPS network...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

The Oracle MySQL Server, MySQL Cluster versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to gain network access through...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...

Oracle Fusion Middleware Control security vulnerabilities

Oracle Fusion Middleware Control versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Framework component, which may allow attackers with physical access to take control of Oracle Fusion Middleware Control during user interactions...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Access Manager authorization issue vulnerability

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Authentication Engine component, which may allow unauthenticated attackers to access and take control of Oracle Access Manager through the SAML network...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle General Ledger security vulnerabilities

Oracle General Ledger versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the ADADMIN component, and they could allow low-privilege attackers to gain access to and control of Oracle General Ledger through network interactions...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Adapters component. Attackers with low privileges may exploit these vulnerabilities to gain control of Oracle SOA Suite through HTTP network access. This could...

Oracle Inventory Management security vulnerabilities

Oracle Inventory Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle...

Oracle Global Lifecycle Management OPatchAuto security vulnerability

The Oracle Global Lifecycle Management OPatchAuto version 12.2.0.1.16 to 12.2.0.1.52 contains security vulnerabilities. These vulnerabilities stem from issues with the Database extensions component. They may allow attackers with high privileges to log in and execute infrastructure tasks, thereby...