Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow low-privilege attackers to take control of Workflow through HTTP network access...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthenticated attackers to log in and execute infrastructure tasks, thereby taking control of Oracle Outside In Technology...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple macOS Sequoia 15.8 and Apple macOS Tahoe 26.7 have vulnerabilities related to permission handling and access control. These vulnerabilities stem from inadequate checking mechanisms, which may allow applications to escalate privileges...

Google Chrome Permission Settings and Access Control Vulnerabilities

Versions of Google Chrome prior to 156.0.8078.47 have vulnerabilities related to permission management and access control. These vulnerabilities stem from improper access control in DevTools, which may allow remote attackers to disclose sensitive information through specially crafted HTML pages...

Oracle Identity Manager security vulnerabilities

Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the REST Web Services component, which may allow low-privilege attackers to take control of Oracle Identity Manager through HTTP network access...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In PDF Export SDK component. It may allow unauthorized attackers to gain access through the HTTP network, thereby taking control of Oracle Outside In Technology when user...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues within the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTT...

Oracle JD Edwards EnterpriseOne Orchestrator: Vulnerabilities in Permission Management and Access Control

Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access to the...

tox-dev filelock: Permissions, permission grants, and access control issues

The tox-dev filelock version 3.30.0 to 4.2.1 had vulnerabilities related to permission handling and access control. These vulnerabilities stemmed from the use of StrictSoftFileLock version 3.30.0 and later, as well as SoftReadWriteLock version 4.0.0 and later. These versions may use a protocol...

Oracle MySQL Server permission and access control issue vulnerability

Vulnerabilities related to permission and access control issues exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1; as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 throu...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component, which may allow unauthenticated attackers to access through the HTTP network, thereby taking control of MySQL Connectors...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue in the Security component. This vulnerability may allow low-privilege attackers with HTTP network access to take control of Oracle...

Oracle Primavera P6 Enterprise Project Portfolio Management: Vulnerabilities in Permissions and Access Control

Versions of Oracle Primavera P6 Enterprise Project Portfolio Management from 21.12.0.0 to 21.12.21.9 and from 22.12.0.0 to 22.12.21.4, as well as versions from 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8, have vulnerabilities related to permission licensing and access control...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle Pasta Authorization Vulnerability

Oracle Pasta versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the Printing Engine component, which may allow low-privilege attackers to gain access through the HTTP network and take control of Pasta...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of Oracl...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. Attackers with low privileges can exploit this vulnerability through network access via HTTP. However, they require user...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...

Oracle OLAP security vulnerabilities

Security vulnerabilities exist in Oracle OLAP versions from 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3. These vulnerabilities arise because low-privilege attackers possessing DBMSAW privileges can access the Oracle Net network, potentially leading to full control over Oracle OLAP...