Oracle Inventory Management security vulnerabilities

Oracle Inventory Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of Oracle...

Oracle Global Lifecycle Management OPatchAuto security vulnerability

The Oracle Global Lifecycle Management OPatchAuto version 12.2.0.1.16 to 12.2.0.1.52 contains security vulnerabilities. These vulnerabilities stem from issues with the Database extensions component. They may allow attackers with high privileges to log in and execute infrastructure tasks, thereby...

Oracle Sourcing security vulnerability

A security vulnerability exists in Oracle Sourcing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Auctions component and may allow low-privilege attackers to gain access via HTTP network connections, thereby taking control of Sourcing...

Oracle WebLogic Server authorization issue vulnerability

Versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of Oracle WebLogic Server contain an authorization issue vulnerability. This vulnerability stems from a Core component problem and may allow unauthenticated attackers to gain HTTP network access and take control of the Oracle WebLogic...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...

Vulnerability related to permission and access control issues in Oracle PeopleSoft Enterprise PeopleTools

Versions 8.61 through 8.63 of Oracle PeopleSoft Enterprise PeopleTools contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Report Distribution component, potentially allowing unauthenticated attackers to gain unauthorized acce...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

Vulnerability related to permission and access control issues in Oracle Partner Management

Versions 12.2.3 through 12.2.15 of Oracle Partner Management contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Internal Operations component. It may allow attackers with limited privileges to access via HTTPS, thereby...

Oracle Solaris security vulnerabilities

A security vulnerability exists in Oracle Solaris version 11.4. This vulnerability stems from issues in the Kernel component and may allow attackers with limited privileges to log in and execute Oracle Solaris infrastructure, thereby gaining control over Oracle Solaris...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. It is possible for attackers with low privileges to access and exploit JD Edwards EnterpriseOne Tools via the...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component, which may allow attackers with low privileges to gain control of JD Edwards EnterpriseOne Tools through HTTP network access...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow attackers with limited privileges to exploit HTTP access to compromise and take control of the Siebel CRM...

Oracle Database Server security vulnerabilities

A security vulnerability exists in Oracle Database Server versions 23.4.0 through 23.26.3. This vulnerability stems from an issue within the RDBMS component and may allow low-privilege attackers with DBMSVECTOR privileges to gain network access via Oracle Net and take control of the RDBMS...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in, execute infrastructure tasks, and take control of Oracle Autonomous Heal...

Oracle HCM Common Architecture security vulnerabilities

A security vulnerability exists in Oracle HCM Common Architecture versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control over Oracle HCM Common Architecture via HTTP network access...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component. Unauthorized attackers may be able to log into the infrastructure where PeopleSoft Enterprise PeopleTools is located, and potentially take...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle Java SE permission licensing and access control issues

Oracle Java SE 8u503, 8u503-perf, and Oracle GraalVM Enterprise Edition 21.3.19.1.1 versions have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from 2D component issues. The vulnerabilities are difficult to exploit, and they may allow unauthenticat...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log in and take control of the infrastructure on which the product ...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via an HTT...