Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Platform Security component, and the attack is relatively difficult. Unauthenticated attackers who gain access to the physical...

Oracle Secure Backup security vulnerability

Versions 19.1.0.0.0 and 19.1.0.1.0 of Oracle Secure Backup contain a security vulnerability stemming from issues in the Device Management and Support component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running Oracle Secure Backup, take contro...

Oracle iSetup permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle iSetup contain a privilege escalation and access control vulnerability. This issue stems from problems in the General Ledger Update Transform and Reports components, potentially allowing highly privileged attackers to gain control over Oracle iSetup via...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component, and they could allow low-privilege attackers to take control of the Oracle E-Business Suite Integrated SOA Gateway...

Oracle Capacity security vulnerability

A security vulnerability exists in Oracle Capacity versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain control over Oracle Capacity via HTTP network access...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing attackers with limited privileges to log in and perform actions such as...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

WordPress Booktics authorization issue vulnerability

WordPress Booktics versions 1.0.30 and earlier have a vulnerability related to authorization. This vulnerability arises from the lack of proper authorization, which may allow attackers to exploit incorrect access control security levels...

Vulnerability related to permission and access control issues in Oracle Mobile Field Service

Versions 12.2.3 through 12.2.15 of Oracle Mobile Field Service contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Admin UI component, potentially allowing unauthenticated attackers to gain HTTP access. Such attackers may...

tox-dev filelock: Permissions, permission grants, and access control issues

The tox-dev filelock version 3.30.0 to 4.2.1 had vulnerabilities related to permission handling and access control. These vulnerabilities stemmed from the use of StrictSoftFileLock version 3.30.0 and later, as well as SoftReadWriteLock version 4.0.0 and later. These versions may use a protocol...

Oracle Database Server security vulnerabilities

A security vulnerability exists in Oracle Database Server versions 23.4.0 through 23.26.3. This vulnerability stems from an issue within the RDBMS component and may allow low-privilege attackers with DBMSVECTOR privileges to gain network access via Oracle Net and take control of the RDBMS...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Attackers with low privileges may exploit these vulnerabilities to gain access via the HTTP network and take control...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component. Unauthorized attackers may be able to log into the infrastructure where PeopleSoft Enterprise PeopleTools is located, and potentially take...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s operating systems and devices that are not up to version 26.7 including Apple iOS before version 26.7, Apple iPadOS before version 26.7, Apple iOS 27 before version 27, Apple iPadOS 27 before version 27, Apple macOS Golden Gate 27 before version 27, and Apple VisionOS 27 befor...

Oracle Java SE permission licensing and access control issues

In Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products, there are vulnerabilities related to permission management and access control. These vulnerabilities exist in Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions;...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component. Attackers with high privileges can access and take control of Oracle EDI Gateway via the HTTP network...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a vulnerability related to permission escalation and access control. This issue stems from improper ANGLE access control and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Apostrophe Technologies ApostropheCMS: Vulnerabilities in Permissions Management and Access Control

Apostrophe Technologies' ApostropheCMS has a security vulnerability. This vulnerability arises from authenticated users who have permission to import target types being able to use objects or operators as update key values. As a result, import queries may match with unrecognized existing document...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow low-privilege attackers to take control of Oracle Solaris through HTTP network access...