Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, which may allow attackers with low permissions to log in and execute infrastructure tasks. This could lead to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, update, insert, or delete certain...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access the system via an HTTPS network. Unauthorized attacker...

Oracle Siebel CRM Cloud Applications information leakage vulnerability

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical communication segments of related hardware may gain...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They may allow unauthorized attackers to access physical communication segmen...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. They may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorized updates, insertions, or deletions of...

Oracle Communications BRM – Elastic Charging Engine security vulnerability

Oracle Communications BRM – Elastic Charging Engine 15.2.0.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component. It may allow low-privilege attackers to access via the TLS network. Unauthorized individuals can create, delete, or modify critica...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access through the HTTP network. This enables them to update, insert, or dele...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through HTTP networks. They can unauthorizedly update, insert, or delete certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Versions 8.61 and 8.62 of Oracle PeopleSoft Enterprise PeopleTools contain a security vulnerability stemming from issues in the Query component. This vulnerability may allow highly privileged attackers to gain HTTP access, resulting in service suspension or frequent crashes. It also enables...

Oracle HCM Common Architecture security vulnerabilities

Oracle HCM Common Architecture versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data via the HTTP network, unauthorizedly create, delete, or modify critical or...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthenticated attackers to access through the HTTP network. This could lead to unauthorized access to critical data or all data, as well as...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. The attack is relatively difficult, and it is possible for unauthenticated attackers to access the JDENET network...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues in the Core component and may allow low-privilege attackers to access certain accessible data via HTTP, without authorization. It may also affect other products...

OpenCATS Authorization Issue Vulnerability

Versions of OpenCATS prior to 0.10.0 have an authorization issue. This vulnerability stems from the absence of authorization verification in ReportsUI::handleRequest. It allows authenticated users to call the customizeEEOReport and generateEEOReportPreview operations without the required...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthorized attackers may gain access through HTTP network connections, allowing...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the Java plugin component. Exploitation by attackers with low privileges, after logging in to the infrastructure running Oracle Java SE, may lead to unauthorized creation,...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues within the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTT...

Apple macOS Path Traversal Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper path handling, which may allow applications to access protected user data...