Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the LDAP network, allowing them to access critical data or all accessible data...

tox-dev filelock: race condition issue

The tox-dev filelock version 3.20.4 up to version 4.2.1 has a race condition vulnerability. This vulnerability stems from the ReadWriteLock mechanism, which allows SQLite to reopen databases and associated files by their names. Attackers with renaming privileges on POSIX systems can replace these...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to access the JDENET network, resulting in service hangs or...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-common-concurrency-limits component. Unauthenticated attackers can access through the HTTP network, resulting in unauthorized updates, insertions, or deletions ...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the ADP component, which may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorize...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Install component. It may allow unauthorized attackers to access physical communication segments, thereby enabling them to create, delete, or modify critical data or all...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access critical data through HTTP network...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow attackers with low privileges to access critical data or all data via the HTTP network. Additionally, unauthorized updates,...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certai...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow unauthenticated attackers to access key data or all data through the HTTP network, as well as to authorize the...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle JD Edwards EnterpriseOne Tools authorization issue vulnerability

Versions 9.2.0.0 through 9.2.26.5 of Oracle JD Edwards EnterpriseOne Tools contain an authorization issue vulnerability. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access. Such attackers can then...

Oracle Marketing security vulnerabilities

Oracle Marketing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Audience component. They may allow unauthorized attackers to access key data or all data via the HTTP network, as well as to update, insert, or delete certain data without...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component. They may allow low-privilege attackers to log in to Oracle Essbase to access infrastructure resources. This could lead to unauthorized access to critical dat...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access through the HTTP network, to perform unauthorized updates, insertions, or deletions of certain accessible data, to...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthorized attackers may access key data or all accessible data via the HTTP network. They may also create, delet...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers with network access to unauthorizedly access critical data or all data via HTTP. Additionall...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They are difficult to exploit. Attackers with low privileges can attempt attacks through the HTTP network, potentially causing Oracle...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues in its Build component. This vulnerability may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in exposure of critical data or all accessible data...