Oracle Siebel CRM Cloud Applications information leakage vulnerability

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical communication segments of related hardware may gain...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access the system via an HTTPS network. Unauthorized attacker...

Oracle MySQL Cluster security vulnerabilities

The Oracle MySQL Cluster version 26.7.0 to 26.7.1 contains security vulnerabilities. These vulnerabilities stem from issues with the Cluster: General component, which may allow unauthenticated attackers to access the system via the TCP network. This could result in service downtime or frequent...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. They are difficult to exploit, and unauthorized attackers may gain access through...

Oracle Identity Manager Connector security vulnerability

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager Connector contain a security vulnerability stemming from issues with the Generic REST component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby creating, deleting, or modifying...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, potentially resulting...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Portal SEC component. Unauthenticated attackers can gain access via HTTP, potentially leading to unauthorized access to critical data or all...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized updates, insertion, or deletion of some...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the JGSS...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks,...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability related to information leakage. This vulnerability stems from an imperfect privacy check mechanism, which may allow applications to access sensitive user data...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the PO View Document component and may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the SQR component, potentially allowing unauthenticated attackers to gain network access via HTTP and thereby access critical data or all accessible da...

Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow highly privileged attackers to log in, gain access to infrastructure, and perform unauthorized access to...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through an HTTPS network, to make unauthorized updates, insert or delete certain accessible data, and to...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or acces...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, or deletions of certain...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. Vulnerable attackers may gain access through an HTTPS network. Unauthorized updates, insertions, or deletions of certain accessible data are...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component, which may allow unauthenticated attackers to access critical data or all accessible data via the HTTP network...