MAL-2025-41472 Malicious code in @twork-data-services/communication-api-v4-communication-voice (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41471 Malicious code in @twork-data-services/communication-api-v4-communication-customer-id (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41470 Malicious code in @twork-data-services/communication-api-v4-communication-chat (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41468 Malicious code in @twork-data-services/cashout-tier-settings-v2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41466 Malicious code in @twork-data-services/business-products (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41464 Malicious code in @twork-data-services/aggregator-sme-task-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41463 Malicious code in @twork-data-services/aggregator-sme-meet-reversal-main (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41462 Malicious code in @twork-data-services/aggregator-sme-group-queues (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41460 Malicious code in @twork-data-services/aggregator-account-get-otb-by-account (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41459 Malicious code in @twork-data-services/accounts-grpc-internal-hidden-ui-objects (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

Oracle REST Data Services Component Privilege Escalation

The vulnerability of the General component of the Oracle REST Data Services service is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, and delete data...

CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

CVE-2025-30756

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

Oracle REST Data Services Cross-Site Request Forgery Vulnerability

Oracle REST Data Services is an Oracle middleware tool for exposing Oracle database functionality to applications via a RESTful API. A security vulnerability exists in Oracle REST Data Services version 24.2.0 that originates from an unauthenticated attacker who can attack via HTTP web access,...

PT-2025-29607 · Oracle · Oracle Rest Data Services

Name of the Vulnerable Software and Affected Versions: Oracle REST Data Services version 24.2.0 Description: An easily exploitable issue exists in Oracle REST Data Services that allows an unauthenticated attacker with network access via HTTP to compromise the service. Successful attacks require...

CVE-2025-30756: Cross-Site Request Forgery (CSRF)

Vulnerability in Oracle REST Data Services component: General. The supported version that is affected is 24.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle REST Data Services. Successful attacks require human interaction from...

CVE-2025-42973

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

CVE-2025-42973

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...