Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow attackers with limited privileges to log in, execute infrastructure tasks, access critical data without...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow unauthorized attackers to access via TLS networks, to create, delete, or modify critical data or all...

Python Packaging Authority virtualenv resource management error vulnerability

The Python Packaging Authority’s virtualenv version 21.14.8 to 21.14.10 has a resource management vulnerability. This vulnerability arises from the app-data seeder, which may cause the environment to link to temporary package files that are deleted after creation. This state can be enabled throug...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from an issue in its Security component. This vulnerability is difficult to exploit; however, attackers with low privileges can log into the Oracle Agile PLM environment, gain unauthorized access to critical data or all...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from problems in the Backend-as-a-Service component, potentially allowing unauthenticated attackers to create, delete, or modify critical...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow high-privilege attackers to log in and access the infrastructure, enabling them to create, delete, or modify...

Oracle Solaris input validation vulnerability

Oracle Solaris 11.4 contains a vulnerability related to input validation. This vulnerability stems from issues with the Image Packaging System component, which may allow unauthenticated attackers to access systems via TLS. This could lead to unauthorized updates, insertions, or deletions of...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critica...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks. They...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

TYPO3 Analytics authorization issue vulnerability

Versions of TYPO3 Analytics prior to 1.1.1 have an authorization issue vulnerability. This vulnerability stems from AJAX routes not checking whether the backend users have permission to access the relevant modules or dashboard components. As a result, any backend user could retrieve analysis data...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers to access critical data via HTTP, enabling unauthorized access to key data or full access to...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, and 11.0.32.1; in Oracle GraalVM versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within the JGSS component, potentially allowing...

Oracle Communications BRM – Elastic Charging Engine security vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Security component. Unauthorized attackers may access physical communication segments, unauthorizedly...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerabilities

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Bidder Registration component, which may allow attackers with limited permissions and access through the network to unauthorizedly access critical data or al...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the ADP component. Unauthorized attackers may exploit these vulnerabilities to access the system via HTTP. This could lead to unauthorized updates, insertions, or deletio...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component, potentially allowing unauthenticated attackers to gain HTTP access and unauthorized access to critic...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability. This vulnerability stems from issues with the Services component, which may allow unauthorized attackers to log in to infrastructure running Oracle Solaris and to perform unauthorized updates, insertions, or deletions of accessible dat...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component. It may allow unauthorized attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates, insertions, or deletions of...