Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access and unauthorized access to critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to log in and modify the infrastructure. It may also enable...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities are due to issues with the JAXP...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow high-privilege attackers to access through the HTTP network, enabling them to unauthorizedly create, delete, or modify critical data o...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data of the Oracle Essbase without proper authorization...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

Oracle Helidon security vulnerabilities

A security vulnerability exists in Oracle Helidon versions 3.0.0 through 3.2.21. This vulnerability stems from issues within the helidon-cors component and may allow unauthenticated attackers to access HTTP-based networks. It could enable unauthorized updates, insertions, or deletions of certain...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebSocket component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data without proper authorization...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Report Distribution component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Query component and may allow attackers with limited privileges to access certain accessible data via HTTP without authorization...

Oracle Data Integrator authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Data Integrator contain an authorization issue vulnerability. This vulnerability stems from issues within the Console/Repository Explorer component and may allow unauthenticated attackers to gain access to Oracle Data Integrator via the RMI network...

Oracle iSupplier Portal security vulnerabilities

The Oracle iSupplier Portal versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Service API component. Vulnerable attackers with low privileges could access the system via the HTTP network. This allows them to update, insert, or delete...

Oracle Siebel CRM End User permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM for End Users contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Portal Framework component and is difficult to exploit. It may allow unauthenticated attackers to access via the...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 21.12.0 to 21.12.17 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthorized attackers to access through the HTTP network. This could result in unauthorized creation, deletion, or modification of...

Oracle JD Edwards EnterpriseOne Localizations security vulnerability

Oracle JD Edwards EnterpriseOne Localizations version 9.2 contains a security vulnerability stemming from an issue in the LATAM component. This vulnerability may allow low-privilege attackers to access the JDENET network, read certain accessible data without authorization, and even cause partial...

Oracle Identity Manager Connector authorization issue vulnerability

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the LDAP Gateway component. It may allow unauthorized attackers to access the LDAP network, create, delete, or modify critical data or all...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, MySQL Cluster versions 26.7.0 to 26.7.1 have security vulnerabilities. These vulnerabilities stem from issues with the Server: Connection Handling component. As a result, unauthenticated attackers may gain network access through various protocols, and unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component, which may allow low-privilege attackers to log in and execute actions on the infrastructure. This can result in service downtime or...