Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to gain access through the HTTP network, thereby taking control of Oracl...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. Attackers with low privileges can exploit this vulnerability through network access via HTTP. However, they require user...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...

Oracle OLAP security vulnerabilities

Security vulnerabilities exist in Oracle OLAP versions from 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3. These vulnerabilities arise because low-privilege attackers possessing DBMSAW privileges can access the Oracle Net network, potentially leading to full control over Oracle OLAP...

Oracle Product Hub security vulnerability

A security vulnerability exists in Oracle Product Hub versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to gain control of Oracle Product Hub via HTTP network access...

Oracle Fusion Middleware Control security vulnerabilities

Oracle Fusion Middleware Control versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Framework component, which may allow attackers with physical access to take control of Oracle Fusion Middleware Control during user interactions...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle Communications BRM – Elastic Charging Engine Authorization Vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This vulnerability stems from problems with the Cloud native deployment component. These versions are vulnerable to attacks. Unauthenticated attackers can...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Bills of Material through HTTP network access...

Oracle Siebel CRM End User permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM for End Users contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Portal Framework component and is difficult to exploit. It may allow unauthenticated attackers to access via the...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low permissions to access and take control of Oracle...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle Secure Backup security vulnerability

Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running Oracle Secure Backup, take contro...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component, and they could allow low-privilege attackers to take control of the Oracle E-Business Suite Integrated SOA Gateway...

Oracle Capacity security vulnerability

A security vulnerability exists in Oracle Capacity versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Capacity via HTTP network access...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing attackers with limited privileges to log in and perform actions such as...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

WordPress Booktics authorization issue vulnerability

WordPress Booktics versions 1.0.30 and earlier have a vulnerability related to authorization. This vulnerability arises from the lack of proper authorization, which may allow attackers to exploit incorrect access control security levels...