Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates, insert or delete...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow unauthorize...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access critical data or all data through HTTP network interactions, under user interaction...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the Java VM component. They may allow low-privilege attackers to access through a SOCKS5 network, enabling them to create, delete, or modi...

Oracle PeopleSoft Enterprise SCM Manufacturing security vulnerabilities

Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions o...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component, which may allow unauthorized attackers to access through the TCP network and read certain accessible data of Oracle Essbase without proper authorization...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow attackers with elevated privileges to create, delete, or modify critical data or all data by accessing the physical...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. They may allow attackers with high privileges to log in and execute actions on the infrastructure, enabling them to...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil Security Vulnerabilities

Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Common Objects component. It may allow unauthorized attackers to access through the HTTP network, enabling them to update, insert, or delete certain...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries And Tools versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. They may allow low-privilege attackers to log into the infrastructure running...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data of Oracle Essbase without proper...

Oracle Siebel Apps - Marketing security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability. This vulnerability stems from issues within the Marketing component, which may allow unauthenticated attackers to exploit HTTP-based access to perform attacks. However, user interaction is required for such attacks ...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as we...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to create, delete, or modify critical data or any other accessible data via HTTP access...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data or all data through HTTP network access. These attacker...

Oracle Siebel Apps – Customer Order Management security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Order Management component. Attackers with low privileges may access through the HTTP network, utilize user interactions, and unauthorizedly update, insert, or delete certain...

Oracle JD Edwards EnterpriseOne Configurator security vulnerabilities

Oracle JD Edwards EnterpriseOne Configurator 9.2 has a security vulnerability. This vulnerability stems from issues with the Configuration Management component, which may allow attackers with low privileges to access through the HTTP network, and to unauthorizedly create, delete, or modify critic...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 21.0.12.1, 25.0.4.1, and 27 have security vulnerabilities. These vulnerabilities stem from issues with the Security component and are difficult to exploit. Unauthorized attackers may gain network access through various protocols, and unauthorized updates, insertions, or...