Oracle Siebel CRM Deployment: Permissions, Licensing, and Access Control Vulnerabilities

The Oracle Siebel CRM Deployment from version 17.0 to 26.9 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or gain full access to all da...

Oracle EDI Gateway: Vulnerabilities in permission management and access control mechanisms

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to gain control of Oracle EDI Gateway throug...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It is difficult to exploit this vulnerability, but it may allow unauthenticated attackers to gain control of the product...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to gain HTTP access and take control of Oracle Outside In Technology...

Oracle Outside In Technology security vulnerability

Version 8.5.8 of Oracle Outside In Technology contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow low-privilege attackers to send HTTP requests over the network, thereby taking control of Oracle Outside In Technolo...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 of Oracle Business Intelligence Enterprise Edition contain a security vulnerability stemming from issues in the Analytics Web Administration component. This vulnerability may allow highly privileged attackers to gain control over Oracle Business...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues in the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTTP...

Oracle Cost Management security vulnerability

A security vulnerability exists in Oracle Cost Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Cost Maintenance component and may allow attackers with limited privileges to gain HTTP access and take control of Oracle Cost Management...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks. They...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.4 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component, which may allow unauthenticated attackers to gain access via the HTTP network and take control of JD Edwards...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation SEC component, which may allow low-privilege attackers to access and take control of JD Edwards EnterpriseOne Tools through the JDENET...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow unauthenticated attackers to access and control the Oracle Essbase through the TCP network...

Oracle MySQL Server security vulnerabilities

A security vulnerability exists in Oracle MySQL Server versions 26.7.0 through 26.7.1. This vulnerability stems from issues within the Server: Optimizer component, potentially allowing highly privileged attackers to exploit it via various protocols over the network, thereby gaining control of...

Oracle Workflow security vulnerabilities

Oracle Workflow versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the Workflow Notification Mailer component, which may allow unauthenticated attackers to take control of Workflow through HTTP network access...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component, which may allow users with lower permissions who are logged in to take control of Applications DBA...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Java Server Issues component, which may allow low-privilege attackers to take control of Oracle One-to-One Fulfillment through HTTP network access...