Oracle PeopleSoft Enterprise SCM Purchasing security vulnerability

Oracle PeopleSoft Enterprise SCM Purchasing version 9.2 contains a security vulnerability stemming from issues in the Supplier Registration component. This vulnerability may allow low-privilege attackers to perform unauthorized updates, inserts, or deletions of certain accessible data via HTTP, a...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through the HTTP network. They can also perform unauthorized updates, insertions, or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from an issue with the Interoperability SEC component, potentially allowing unauthenticated attackers to access the system via the HTTPS network. It may enable...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Data Mover component and may allow attackers with elevated privileges to log in, modify the infrastructure, update, insert, or delete certain dat...

Oracle Java SE resource management error vulnerability

Oracle Java SE versions 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and version 27; Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1; and Oracle GraalVM Enterprise Edition version 21.3.19.1.1 contain a resource management error vulnerability. This vulnerability stems from issues...

Oracle Siebel CRM Deployment: Permissions, Licensing, and Access Control Vulnerabilities

The Oracle Siebel CRM Deployment from version 17.0 to 26.9 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or gain full access to all da...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Versions 8.61 and 8.62 of Oracle PeopleSoft Enterprise PeopleTools contain a security vulnerability stemming from issues in the Porting component. This vulnerability may allow attackers with elevated privileges to log into the infrastructure hosting PeopleSoft Enterprise PeopleTools, enabling the...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues in the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTTP...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and is difficult to exploit. It may allow unauthenticated attackers to access HTTP-based networks, thereby creating, deleting, or...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle JD Edwards EnterpriseOne Sales Order Entry security vulnerability

Version 9.2 of Oracle JD Edwards EnterpriseOne Sales Order Entry contains a security vulnerability stemming from issues within the Sales Order Entry component. This vulnerability may allow attackers with limited privileges to access the JDENET network, thereby gaining unauthorized access to...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. Unauthorized attackers may gain access through the T3 and IIOP networks. They may also perform unauthorized updates, insertions, or deletions of certain accessible...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Data Provider UI component. This may allow attackers with low privileges to access critical data or all accessible data via the HTTP network. Additionally, unauthorized...

Oracle Email Center security vulnerability

A security vulnerability exists in Oracle Email Center versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Message Component component, potentially allowing unauthenticated attackers to gain access via HTTP. Under user interaction, they may update, insert, or delete...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Data Transforms component. They may allow unauthorized attackers to access critical data or all data through HTTP network connections. Additionally, they may...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates,...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the LDAP network, allowing them to access critical data or all accessible data...

tox-dev filelock: race condition issue

The tox-dev filelock version 3.20.4 up to version 4.2.1 has a race condition vulnerability. This vulnerability stems from the ReadWriteLock mechanism, which allows SQLite to reopen databases and associated files by their names. Attackers with renaming privileges on POSIX systems can replace these...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...