Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

Security vulnerabilities in Oracle WebLogic Server Proxy Plugin

Versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 of the Oracle WebLogic Server Proxy Plugin contain a security vulnerability. This vulnerability stems from issues within the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. It may allow unauthenticated attackers to gain HTTP...

Oracle Mobile Field Service security vulnerability

A security vulnerability exists in Oracle Mobile Field Service versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Admin UI component, potentially allowing unauthenticated attackers to gain access via HTTP networks and thereby access critical data or all accessible da...

Oracle Shipping Execution security vulnerability

The Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. Unauthorized attackers may gain access through the Oracle Net network, allowing them to create, delete, or modify critical data or all...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component. It is difficult to exploit and allows unauthenticated attackers to gain access to critical data or a...

Apple iOS Permission Licensing and Access Control Vulnerabilities

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, Apple macOS prior to Golden Gate version 27, Apple macOS prior to Tahoe version 26.7, and Apple VisionOS prior to version 27 have vulnerabilities related to permission licensing and access control. These vulnerabilitie...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from WebLogic component issues and are difficult to exploit. Attackers who are unauthenticated and have access to the physical communication segments connected to the PeopleSof...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow unauthenticated attackers to access via HTTP, interact with users, and unauthorizedly update, insert,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow attackers with low privileges to log in to the JD Edwards EnterpriseOne Tools, unauthorizedly...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow attackers with low privileges to log in and execute infrastructure operations, such as unauthorized updates,...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal operations component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical data or all accessible data without authorization...

Oracle Compensation Workbench security vulnerability

A security vulnerability exists in Oracle Compensation Workbench versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Total Compensation Statement component and may allow low-privilege attackers to perform unauthorized updates, insertions, or deletions of certain data,...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core component, potentially allowing low-privilege attackers to access through the SOAP network, enabling them to unauthorizedly create, delete, or modify critical data or...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data and all accessible data via the HTTP network. Additionally, they may...

Oracle BI Publisher security vulnerability

Oracle BI Publisher 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Web Server component, which may allow unauthorized attackers to access through the HTTP network. This could lead to unauthorized updates, insertions, or deletions of certain accessible data,...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 12.2.1.4.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component. Unauthenticated attackers can access the system via the HTTP network, and require interaction from non-attacker...

TYPO3 sgalinski Cookie Consent Authorization Vulnerability

TYPO3 versions prior to 8.0.0 through 8.1.12 and 7.4.6 contain an authorization vulnerability. This vulnerability stems from the fact that the function for providing consent and statistical data does not check whether the backend users have permission to access the requested modules or pages. As ...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access. They may then make unauthorized updates, insert, or dele...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. Unauthorized attackers may gain access via the HTTP network. Without interaction with authorized personnel, they may create, delete...