Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow unauthenticated attackers to access the system over the TLS network, resulting in unauthorized access to critical data or all data, as well as...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, and require interaction from someone other than the attacker. This...

IBM Cyber Fraud Exception Handling Vulnerability

IBM Cyber Fraud 1.0.0 to 1.0.2 versions have a vulnerability related to improper exception handling. This vulnerability arises due to the absence of the Secure attribute, allowing sensitive cookies to be transmitted over unencrypted connections. This could enable attackers to intercept session da...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue with the Security component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. Attackers with low privileges can access the system via the HTTP network, unauthorizedly create, delete, or modify critical...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the Securit...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the JDBC...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow unauthenticated attackers to access critical data or all accessible data through the JDENET...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Database Actions component and may allow highly privileged attackers to gain HTTP network access, potentially...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the JAXP component and are difficu...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates, insert or delete...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow unauthorize...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access critical data or all data through HTTP network interactions, under user interaction...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the Java VM component. They may allow low-privilege attackers to access through a SOCKS5 network, enabling them to create, delete, or modi...

Oracle PeopleSoft Enterprise SCM Manufacturing security vulnerabilities

Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions o...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component, which may allow unauthorized attackers to access through the TCP network and read certain accessible data of Oracle Essbase without proper authorization...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow attackers with elevated privileges to create, delete, or modify critical data or all data by accessing the physical...