Oracle Identity Manager Connector security vulnerability

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager Connector contain a security vulnerability stemming from issues within the Connectors and Connector Server components. This vulnerability may allow attackers with elevated privileges and network access via SOAP to compromise Oracle...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27, as well as Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1, have security vulnerabilities. These vulnerabilities stem from issues with the Networking component and are difficult to exploit. They may allow...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the Securit...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the Utility component. Unauthorized attackers may...

Oracle Siebel Apps - Marketing security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Marketing component. This vulnerability may allow unauthenticated attackers to access HTTP-based networks and read certain data without authorization...

Juan Leyva’s configurable reports block for Moodle has an authorization issue vulnerability

Juan Leyva’s Configurable Reports block for Moodle versions prior to 5.3.0 has an authorization issue. This vulnerability stems from an authorization bypass. When the checkpermissions validation fails, adding only a warning still results in the display of complete report data. As a result,...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0 and 14.1.1.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. The vulnerabilities are difficult to exploit. Unauthorized attackers can access them via the HTTP...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the Core component; unauthenticated attackers can access it via HTTP. Under user interaction, unauthorized updates, insertions, or deletions of certain accessible...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers with network access to unauthorizedly update, insert, or...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities are caused by issues with the SAP ERP+ component. They may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, o...

Oracle Identity Manager security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager contain a security vulnerability stemming from issues in the OIM Legacy UI component. This vulnerability may allow unauthenticated attackers to access the system via HTTP, enabling them to unauthorizedly update, insert, or delete certa...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues with the Java Based Agent component. This vulnerability may allow unauthenticated attackers to gain HTTP access and unauthorizedly read certain accessible data within Oracle Essbase...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. Unauthorized attackers can exploit these vulnerabilities through HTTP network access. This may lead to unauthorized creation,...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all accessible data, unauthorized updates, insertions, or...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Web General component. Unauthorized attackers may gain access via the HTTP network, causing the service to han...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, potentially allowing unauthorized attackers to access through the HTTP network. This may lead to unauthorized updates,...