Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow low-privilege attackers to log in to the system to execute unauthorized actions on the...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Generic REST component. Unauthorized attackers may gain access through HTTP network requests, allowing them to access critical data or fully acce...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Unauthenticated attackers can access data via the HTTP network and exploit interactions with non-attacker users. This allows...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the LDAP component and may allow low-privilege attackers to log in and execute infrastructure tasks. It also enables unauthorized updates, insertions, ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Fluid Core component. Unauthorized attackers with low privileges may access the system via the HTTP network. This allows them to perform unauthorized...

Oracle Agile Product Lifecycle Management For Process authorization issue vulnerability

Oracle Agile Product Lifecycle Management for Process version 6.2.4 contains an authorization issue vulnerability. This vulnerability stems from issues within the Product Quality Management component and may allow unauthenticated attackers to create, delete, or modify critical data or all...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within t...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP without user interaction, as well...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Process Scheduler component. They may allow low-privilege attackers to access through the HTTP network, requiring user interaction. This can lead to...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 Dev Platform Tech - Cloud component. They are difficult to exploit and could allow high-privilege attackers to log in and execute actions on the...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow highly privileged attackers to gain SQL network access, thereby unauthorizedly accessi...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network access...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They are difficult to exploit, and it is possible for unauthenticated attackers to access critical data or all accessible data throu...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-dns-resolver-round-robin component. They may allow unauthorized attackers to access the DNS network, enabling them to update, insert, or delete certai...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Web Runtime SEC component and may allow low-privilege attackers to access HTTP-based networks. Under certain circumstances, they can make...

Oracle MySQL Server Permission Licensing and Access Control Vulnerabilities

The Oracle MySQL Server, MySQL Cluster versions 9.7.0 to 9.7.3 and 26.7.0 to 26.7.1 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the InnoDB component. They may allow high-privilege attackers to gain network access through...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may gain access through HTTP network connections, allowing them to access critical data or acce...

Oracle Document Management and Collaboration security vulnerabilities

Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Attachments component. They may allow low-privilege attackers to access critical data through HTTP network requests without user interaction. This...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, and unauthorized updates, insertions, or deletions of certain accessible data may occ...