Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Case management Service 11g+ component. They may allow unauthorized attackers to access critical data or all accessible data via HTTP network...

Oracle Identity Manager Connector security vulnerabilities

Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP Gateway component, which may allow unauthorized attackers to access critical data or all accessible data through the LDAP network, without prope...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data via the HTTP network. These attackers are not authorized to create,...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with high privileges to access via the HTTP network, unauthorizedly create, delete, or modify critical da...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain unauthorized access to critical data or all data by accessing the physical communication segmen...

Oracle Product Workbench Authorization Issues Vulnerability

Oracle Product Workbench versions 12.2.3 to 12.2.15 have an authorization issue vulnerability. This vulnerability stems from issues with the WebUI components, allowing unauthorized attackers to access through the HTTP network. This enables unauthorized creation, deletion, or modification of...

Oracle Shipping Execution security vulnerability

A security vulnerability exists in Oracle Shipping Execution versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Workflow Events component and may allow unauthenticated attackers to gain access via HTTP, thereby gaining unauthorized access to critical data or full...

Oracle Java SE security vulnerabilities

Oracle Java SE, Oracle JavaFX, and Oracle GraalVM Enterprise Edition versions Java SE 8u503; Oracle JavaFX 21.0.12, 25.0.4, and 27 versions; Oracle GraalVM Enterprise Edition 21.3.19.1.1 version have security vulnerabilities. These vulnerabilities stem from JavaFX component issues and are difficu...

Oracle Production Scheduling security vulnerability

A security vulnerability exists in Oracle Production Scheduling versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to log in, modify the infrastructure, update, insert, or delete certain accessible...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow low-privilege attackers to gain network access via HTTP, leading to service hangs or frequent crashes complete denial of service, and potentially unauthorized readi...

Oracle US Federal Human Resources security vulnerability

A security vulnerability exists in Oracle US Federal Human Resources versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain HTTP access, thereby accessing critical data without...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers to access data through the HTTP network, requiring user...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, enabling unauthorized updates,...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to access critical data via the HTTP network, gain unauthorized access to key information, or fully access all accessib...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Server - JRE component and may allow highly privileged attackers to log in, gain access to infrastructure, and thereby access critica...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers with low privileges may access critical data or all accessible data through the HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Panel Processor component. Exploitation is relatively difficult; low-privilege attackers can access data via the HTTP network, requiring interaction with...