Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with elevated privileges to gain access via the HTTPS network, thereby taking control of Oracle Mobile Field...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris 11.4; it stems from issues within the Utility component and may allow attackers with limited privileges to log in to Oracle Solaris and take control of the underlying infrastructure...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component and are difficult to exploit. Unauthenticated attackers may gain control of JD Edwards EnterpriseOne Tools when they ha...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component and may allow attackers with limited privileges to gain access via HTTP, thereby taking control of Oracle Mobile Field Service...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper access control within ComputePressure; remote attackers can exploit it by using specially crafted HTML pages to bypass web source policies...

Oracle MySQL Server permission and access control issue vulnerability

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 are affected by a permission and access control vulnerability...

LeeDrOiD Labs Shortcutter 2 App: Permissions issues and vulnerabilities in access control

LeeDrOiD Labs Shortcutter 2 App version 9.0.48 has vulnerabilities related to permissions and access control. These vulnerabilities stem from incorrect handling of the parameter Class in the Class.forName function within the file ToggleGeneric.java. This improper export of Android application...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.20 has a security vulnerability. This vulnerability stems from issues with the Core component and could allow attackers with high privileges and access to the physical communication ports connected to the hardware running Oracle VM VirtualBox to take control of it. This...

Oracle Call Center Technology security vulnerabilities

Oracle Call Center Technology versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow unauthenticated attackers to access through the RMI network and take control of Oracle Call Center Technology...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Oracle Mobile Field Service versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access and control Oracle Mobile Field Service via an HTTPS network...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle SOA Suite authorization issue vulnerabilities

The Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 contain vulnerabilities related to authorization. These vulnerabilities stem from issues with the Fabric Layer component, which may allow unauthenticated attackers to gain control of the Oracle SOA Suite through HTTP network access...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

The Oracle MySQL Server, MySQL Cluster versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to gain network access through...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...