Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible dat...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

Oracle Solaris Permission Licensing and Access Control Vulnerabilities

Oracle Solaris 11.4 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the X Window System components, which may allow attackers with low privileges to log into infrastructure running Oracle Solaris and carry out attacks...

Oracle WebLogic Server authorization issue vulnerability

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component issues and may allow unauthenticated attackers to access through the HTTP network. As a result, unauthorized individuals may...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data through HTTP network requests, as well as access all accessible data...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster contain a security vulnerability stemming from issues with the Server: XML component. This vulnerability may allow highly privileged attackers to gain network access via various protocols, enabling them to create, delete, or modify critical data or all...

Oracle Applications DBA permission licensing and access control issues

Oracle Applications DBA versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the AD Utilities component. They may allow low-privilege attackers to log in and execute infrastructure tasks. This could lead to...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and is difficult to exploit. However, it may allow attackers with low privileges who can log in to JD...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Diagnostics component and may allow low-privilege attackers to access HTTP-based networks, read certain data without authorization, and even cause partia...

Oracle Java SE security vulnerabilities

A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, version 27, and 21.3.19.1.1. This vulnerability stems from issues within the JGSS component and is difficult to...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Create Item Instance component. Vulnerable attackers may access critical data or all data through HTTP network interactions without proper authorization. They may also...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow low-privilege attackers to log in and access the infrastructure, potentially leading to unauthorized access to...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access critical data and all accessible data through the HTTP...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 21.0.12.1, 25.0.4.1, and 27 have security vulnerabilities. These vulnerabilities stem from issues with the Compiler component. Unauthorized attackers may gain network access through various protocols, resulting in unauthorized updates, insertion of or deletion of certain...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core components. It may allow attackers with low privileges to access through the HTTP network, thereby unauthorizedly creating, deleting, or modifying critical data or al...

Letta encryption problem vulnerabilities

Letta versions 0.16.8 and earlier have encryption-related vulnerabilities. This vulnerability stems from the LocalSandbox sub-process inheriting the entire server environment. Attackers can exploit this by running code via POST /v1/tools/run or custom tools, thereby reading LETTAPGURI,...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: JSON component...

Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...