Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OIDC component. Unauthorized attackers may gain access through the HTTP network, allowing them to access critical data or all accessible data under user interaction...

Oracle Partner Management: Permissions, licensing, and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Partner Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, resulting i...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues within the helidon-security-providers-jwt component, potentially allowing unauthenticated attackers to access certain data accessible via HTTP without authorization...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the LRA component, which may allow unauthenticated attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain data are possible, as well a...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access critical data or access all accessible data by accessing the physical...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access critical data or all data via the HTTP network. Unauthorized attacke...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM version 2.6 has a security vulnerability. This vulnerability stems from issues with the Acollect component, which may allow unauthorized attackers to access critical data or all accessible data through the TLS network without proper authentication...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to access critical or all accessible data via HTTP over the network, as well as unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component. The vulnerabilities are difficult to exploit and require a high-privilege attacker to log in to the infrastructure managed by PeopleSoft...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They could allow low-privilege attackers to log in and access infrastructure, thereby enabling unauthorized updates, insertions...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data without proper authorization...

Oracle Database Server security vulnerabilities

Security vulnerabilities exist in Oracle Database Server versions 19.3 through 19.32, 21.3 through 21.23, and 23.4.0 through 23.26.3. These vulnerabilities stem from issues with the VPD component, potentially allowing low-privilege attackers with Create Table privileges to access the Oracle Net...

Oracle General Ledger security vulnerabilities

A security vulnerability exists in Oracle General Ledger versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges and network access via HTTP to create, delete, or modify critical data or all...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow low-privilege attackers to log into the infrastructure running Siebel CRM Deployment, thereby gaining...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They are difficult to exploit. Unauthenticated attackers who have access to the hardware where Oracle WebCenter Content is located m...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access. They may then make unauthorized updates, insert, or dele...

Oracle JD Edwards EnterpriseOne Homebuilder security vulnerability

Oracle JD Edwards EnterpriseOne Homebuilder version 9.2 contains a security vulnerability stemming from issues in the Homebuilder Management component. This vulnerability may allow low-privilege attackers to access the JDENET network, enabling them to create, delete, or modify critical data or an...