PT-2025-29638

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists in the InnoDB component of Oracle MySQL Server. Successful exploitation of this...

PT-2025-29602 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.27 Oracle Database Server versions 21.3 through 21.18 Oracle Database Server versions 23.4 through 23.8 Description: This issue resides within the Unified Audit component of Oracle Database...

Oracle E-Business Suite 访问控制错误漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Universal Work Queue of Oracle...

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Unified Audit of Oracle Database Server, which can b...

PT-2025-29660

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.5 through 12.2.14 Description This issue relates to flaws in access control within the request handling component of Oracle Universal Work Queue. Successful exploitation allows an unauthenticated remot...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle iStore for Oracle E-Business...

PT-2025-29597

Name of the Vulnerable Software and Affected Versions Oracle MES for Process Manufacturing versions 12.2.12 through 12.2.13 Description An issue exists in the Device Integration component of Oracle MES for Process Manufacturing, part of Oracle E-Business Suite. This relates to cross-site request...

PT-2025-29598

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.14 Description A flaw exists in the Shopping Cart component of the Oracle iStore product, which is part of Oracle E-Business Suite. This issue stems from insufficient input validation. A remote,...

PT-2025-29628 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: This issue affects the Web Container component of Oracle WebLogic Server. An unauthenticated attacke...

Oracle Fusion Middleware 访问控制错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Oracle JD Edwards 访问控制错误漏洞

Oracle JD Edwards is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation USA. The product offers application modules for financial management, project management and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards' JD...

Oracle E-Business Suite 访问控制错误漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Universal Work Queue for Oracle...

Oracle Java SE 访问控制错误漏洞

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...

Oracle Java SE 安全漏洞

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE for Oracle Java SE and Oracle GraalVM Enterprise Edition, which can be...

PT-2025-29640

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.42 MySQL Server versions 8.4.0 through 8.4.5 MySQL Server versions 9.0.0 through 9.3.0 Description A vulnerability exists in the Optimizer component of Oracle MySQL Server. Successful exploitation of thi...

Oracle Analytics 访问控制错误漏洞

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. A security vulnerability exists in Oracle Business Intelligence Enterprise Edition versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0 of Oracle Analytics, which originates from an unauthenticated attacker who can conduct...

PT-2025-29594 · Oracle · Oracle Crm Technical Foundation +1

Name of the Vulnerable Software and Affected Versions: Oracle CRM Technical Foundation versions 12.2.11 through 12.2.13 Description: An easily exploitable issue exists in the Oracle CRM Technical Foundation component Preferences of Oracle E-Business Suite. A high-privileged attacker with network...

PT-2025-29324 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Oracle Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0 through 21.12.21 Oracle Primavera P6 Enterprise Project Portfolio...

CVE-2025-3780

The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wcfmredirecttosetup function in all versions up to, and including, 6.7.16. This makes i...

The vulnerability of the StateRepository service in the Windows operating system allows a perpetrator to gain access to read and modify data.

The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to gain access to read and modify data...