Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Mobile Applications component. They may allow attackers with low privileges to access through the HTTP network, update, insert, or delete certain accessible data without...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Utility component. These vulnerabilities could allow low-privilege attackers to log in and execute actions on the infrastructure, enabling them to unauthorizedly create, delete, or modify critical data or all data...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, and 25.0.4.1 have security vulnerabilities. These vulnerabilities are caused by issues with the Networking component, which may allow unauthenticated attackers to access the network via various protocols. Unauthorized...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access through the HTTP network. Without user interaction, unauthorized users may...

Oracle WebLogic Server Proxy Plug-in security vulnerabilities

The Oracle WebLogic Server Proxy Plug-in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. Unauthorized attackers can exploit these vulnerabilities ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. They may allow attackers with high privileges to log in and execute infrastructure tasks. Unauthorized updates, insertions, o...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from an issue in the Asset Management component. This vulnerability may allow attackers with elevated privileges and network access via HTTP to create, delete, or modify critical data ...

Oracle Primavera P6 Enterprise Project Portfolio Management security vulnerabilities

Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0.0 to 21.12.21.9, 22.12.0.0 to 22.12.21.4, 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8 have security vulnerabilities. These vulnerabilities stem from issues with the Web Access component, which may...

Apple iOS Authorization Issue Vulnerability

Versions of Apple’s iOS prior to version 27, Apple iPadOS prior to version 27, and Apple macOS Golden Gate prior to version 27 have authorization-related vulnerabilities. These vulnerabilities may allow applications to access sensitive user data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow attackers with low privileges to log in and execute infrastructure tasks. Unauthorized updates, insertions, or deletions...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities, which stem from issues with the Plugins component. These vulnerabilities could allow high-privilege attackers to log in and execute actions on the infrastructure, requiring user interaction. This could result in unauthorized creation, deletion, or...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access data through the HTTP network via user interaction. This can result in unauthorized updates,...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component. It may allow low-privilege attackers to access through the JDENET network, enabling them to update, insert, or delete certa...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Integration Broker component, potentially allowing unauthenticated attackers to gain HTTP access. Under user interaction, they may unauthorizedly...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues. Unauthorized attackers may gain access through the HTTP network. Key data or all accessible data may be accessed without user interaction. Additionally...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503-perf version, 11.0.32.1 version, 17.0.20.1 version, 21.0.12.1 version, and 25.0.4.1 version and 27 version; Oracle GraalVM for JDK 17.0.20.1 version and 21.0.12.1 version; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 version have security vulnerabilities. These...

Oracle HTTP Server security vulnerabilities

Oracle HTTP Server versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OSSL Module component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access and damage the Oracle HTTP Server via the HTTP network...

Oracle Siebel CRM Integration permission and access control issue vulnerability

Versions 25.12 through 26.9 of Oracle Siebel CRM Integration contain a vulnerability related to permission and access control issues. This vulnerability stems from an Open Integration component flaw, potentially allowing unauthenticated attackers to gain network access via HTTP. Under user...