Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Report Distribution component. It may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical or...

Oracle Java SE authorization issue vulnerability

Oracle Java SE versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and version 27 contain an authorization issue vulnerability. This vulnerability stems from issues within the Libraries component and may allow unauthenticated attackers to log in, execute infrastructure tasks, and...

Apple macOS Authorization Issues Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a licensing issue vulnerability. This vulnerability stems from state management issues, which may allow applications to access sensitive user data...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in the Security component. This vulnerability may allow unauthenticated attackers to access T3 and IIOP networks, enabling them to read certain data accessible via Oracle Essbase without authorization...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, allowing unauthorized attackers to access data via the HTTP network, enabling unauthorized updates, insertions, ...

Oracle Communications BRM – Elastic Charging Engine security vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from Core component issues, which may allow low-privilege attackers to log in and access infrastructure, leading to unauthorize...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. Unauthorized attackers may gain access through the HTTP network. They may access critical data, or all data, as well as update,...

Oracle Siebel CRM End User security vulnerability

A security vulnerability exists in Oracle Siebel CRM End User versions 17.0 through 26.9. This vulnerability stems from issues within the Communications Panel/Dashboard component, potentially allowing unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to...

LINE LIFF Cross-Site Scripting Vulnerability

The LINE LIFF SDK versions 2.20.0 to 2.31.0 have a cross-site scripting vulnerability. This vulnerability stems from a DOM-based cross-site scripting issue. When a user opens a specially crafted URL in an external browser, an attacker can execute arbitrary JavaScript on the affected LIFF...

Oracle Report Manager permission granting and access control issues

Oracle Report Manager versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data, all data, as well as update,...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. They may allow unauthenticated attackers to access through the HTTP network, resulting in unauthorized updates, insertion of ...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing attackers with limited privileges to log in and perform actions such as...

Oracle Primavera P6 Enterprise Project Portfolio Management: Vulnerabilities in Permissions and Access Control

Versions of Oracle Primavera P6 Enterprise Project Portfolio Management from 21.12.0.0 to 21.12.21.9 and from 22.12.0.0 to 22.12.21.4, as well as versions from 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8, have vulnerabilities related to permission licensing and access control...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthenticated attackers to access through the HTTP network, potentially leading to...

Zyxel EX3501-T0 firmware authorization issue vulnerability

The Zyxel EX3501-T0 firmware version 5.44ACHR.6C0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper authorization in the Data Access Layer DAL, which may allow authenticated attackers to elevate their privileges by modifying the loginprivilege data...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the US Payroll Year End component. It may allow low-privilege attackers to access HTTP-based interfaces, enabling unauthorized updates, insertions, or deletions of certai...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components, allowing low-privilege attackers to access through the HTTP network. This enables unauthorized updates,...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

jcrodriguez-dis Virtual Programming Lab for Moodle Cross-Site Script Vulnerabilities

The jcrodriguez-dis Virtual Programming Lab for Moodle versions prior to 5.0.0 has a cross-site scripting vulnerability. This vulnerability stems from the unencoded filename1/filename2 parameters in the similarity/diff.php file. It may lead to reflective cross-site scripting attacks. Attackers ca...