Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component. Unauthorized attackers may gain network access through various protocols. In situations where user interaction is required, unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Integration Broker component. Unauthorized attackers may gain access through the HTTP network, requiring user interaction. This allows unauthorized access ...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log into the infrastructure running on JD Edwards EnterpriseOne...

TYPO3: Coding.ms authorization issue vulnerability

TYPO3: There are authorization issues and vulnerabilities in versions prior to 6.0.0, 6.3.0, 5.0.0, 5.21.1, and 4.9.4. These vulnerabilities stem from an unvalidated data source for PayPal payment notifications. Any visitor to a website could override stored payment notifications for orders that...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with HTML UI components. Unauthorized attackers may gain access through the HTTP network. Without proper authorization, unauthorized updates, insertions, or deletions of certain...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the REST components, allowing unauthorized attackers to access through the HTTP network. Unauthorized data can be read under user interaction...

Oracle PeopleSoft Enterprise FIN Product Configurator Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Product Configurator Brazil version 9.1 contains a security vulnerability stemming from issues within the Product Configurator component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby unauthorizedly...

EventON – Subscriber SQL injection vulnerability

EventON – Subscriptions versions 1.4.5 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the email parameters and inadequate preparation for existing SQL queries. It may allow unauthenticated attackers to append additional SQL queries to existi...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Database Actions component. It may allow attackers with elevated privileges to perform network access via HTTP, unauthorized updates, insertions, or deletio...

Oracle Java SE security vulnerabilities

A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, version 27, and version 21.3.19.1.1. This vulnerability stems from an issue in the Serviceability component...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities are due to issues with the JAAS...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; in Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues with the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Fluid Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. They may allow unauthorized attackers to access physical communication segments, unauthorizedly create, delete...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical data or...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 2.6 contains a security vulnerability stemming from an issue in the Acollect component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to critical data or all accessible data...

Oracle Zfs Storage Appliance Kit security vulnerabilities

The Oracle Zfs Storage Appliance Kit version 8.8 has a security vulnerability. This vulnerability stems from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component, which may allow attackers with low privileges to log in and access infrastructure...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthorized, unauthenticated attackers to access critical data or all data, as well as to...