Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthorized attackers to access key data, all data, as well as update, insert, or delete certain data through...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Transaction Entry component. Unauthorized attackers with low privileges may access critical data or all accessible data via the HTTP network...

Oracle Identity Manager Connector security vulnerabilities

Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP Gateway component. As a result, unauthorized attackers may gain access through the TCP network. They are allowed to create, delete, or modify...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow attackers with low privileges to access the product via the JDENET network, to create, delete, or modify...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access critical data or all data via the HTTP network, and may cause partial denial-of-service attacks...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, which may allow unauthorized attackers to access through the JDENET network. Unauthorized updates, insertions, or deletions...

Oracle Product Lifecycle Analytics security vulnerabilities

Oracle Product Lifecycle Analytics 3.6.1 has a security vulnerability. This vulnerability stems from issues with the Installation Issues component. It may allow low-privilege attackers to log in and access critical data or all data, without proper authorization, and may cause partial...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorize...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical...

Stormshield Network Security Authorization Issue Vulnerability

Stormshield Network Security versions 4.3.0 to 4.3.44, 4.8.0 to 4.8.19, 5.0.0 to 5.0.9, and 5.1.0 to 5.1.3 have an authorization issue vulnerability. This vulnerability arises from a failure in the dynamic data file signature check; there are logical errors in the signature verification routine,...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Server component, which may allow unauthorized attackers to access critical data or all accessible data via HTTP network connections...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.2. This vulnerability stems from issues with the General component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of Oracle REST Data Services...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to log in, perform infrastructure operations, create, delete, o...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthenticated attackers may be able to access the network, unauthorizedly create, delete, or modify critical data...

Oracle MySQL Connectors security vulnerability

Oracle MySQL Connectors version 26.7.1 contains a security vulnerability stemming from issues in the Connector/ODBC component. This allows attackers with limited privileges to gain network access via various protocols, enabling them to create, delete, or modify critical data as well as all...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.1. This vulnerability stems from issues within the GraphQL component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Security component and may allow unauthenticated attackers to gain HTTP access. Such access could lead to unauthorized access to critical data or...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertion, or deletion of some accessible data, as...