Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via an HTT...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform component. An attacker with high privileges could log in to the infrastructure running this...

Oracle iSetup permission licensing and access control vulnerabilities

Oracle iSetup versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the General Ledger Update Transform and Reports components. Attackers with low permissions may exploit these vulnerabilities to gain networ...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data, all data, as well as update,...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, have security vulnerabilities. These vulnerabilities stem from...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, Apple macOS prior to Golden Gate version 27, Apple macOS prior to Tahoe version 26.7, and Apple VisionOS prior to version 27 have vulnerabilities related to permission licensing and access control. These vulnerabilitie...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Low-privilege attackers may exploit these vulnerabilities to gain network access via HTTP, thereby taking control of Oracle Payroll...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control practices in Ozone, which may allow remote attackers to exploit the system by leaking sensitive information through...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Payroll component and are difficult to exploit. They could allow attackers with high privileges to take control of Oracle Payroll through HTTP network access...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 25.12 to version 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Workflow component. They require interaction from non-attacker users. This could allow attackers with low permissions to access and take control of...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to log in to Oracle Payroll and execute infrastructure-related tasks, thereby taking control of Oracle...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Payroll through HTTP network access...

Oracle Engineering security vulnerabilities

A security vulnerability exists in Oracle Engineering versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Change Management component and may allow low-privilege attackers to gain control of Oracle Engineering via HTTP network access...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Foundation component, which may allow unauthenticated attackers to access the system via the HTTP network, potentially gaining control of Oracle Business...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server version 12.2.1.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component, and they could allow low-privilege attackers to log in and execute actions on the infrastructure, thereby taking control of the Oracle HTTP Server...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

The Oracle MySQL Server, MySQL Cluster versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to gain network access through...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...