CVE-2024-21250

Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite component: Quality Manager Specification. Supported versions that are affected are 12.2.13-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...

AZL-50412 CVE-2024-21247 affecting package mysql for versions less than 8.0.40-1

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2024-21195

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Layout Templates. Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI...

UBUNTU-CVE-2024-21247

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2024-21282

The CVE applies to Oracle E-Business Suite, specifically the Common Components used by Oracle Financials. Affected versions are 12.2.3–12.2.13. The root cause is a vulnerability in the authorization mechanism in Oracle Financials that can be exploited by a low-privileged attacker over HTTP to per...

CVE-2024-21190: Undefined Security Weakness

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...

CVE-2024-9968: Improper Neutralization of Special Elements used in an SQL Command

WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2. An attacker could exploit the vulnerability to update, inser...

CVE-2024-21214: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Query. Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

VulnCheck KEV: CVE-2024-28987

SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager is an application management software from Oracle Corporation USA. The software provides monitoring, trending, and fault management for Oracle data files. A security vulnerability exists in Oracle Applications Manager versions 12.2.11 through 12.2.13. An attacker could...

PT-2024-7012 · Oracle · Oracle Advanced Pricing

Name of the Vulnerable Software and Affected Versions: Oracle Advanced Pricing component: Price List versions 12.2.3 through 12.2.13 Description: The issue is related to insufficient authorization procedure due to incorrect input validation in the Price List component of Oracle Advanced Pricing,...

PT-2024-7089 · Oracle · Oracle Enterprise Manager Fusion Middleware Control

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Fusion Middleware Control version 12.2.1.4.0 Description: The issue is related to insufficient input validation in the FMW Control Plugin component of Oracle Enterprise Manager Fusion Middleware Control, allowing a...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Common Application...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle E-Business Suite...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Cost Management versions 12.2.1...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Financials version...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Field Service versions 12.2.3...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Process Manufacturing Product...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other functions. A security vulnerability exists in Oracle Quoting versions 12.2.7 throug...