Oracle Payroll security vulnerability

A security vulnerability exists in Oracle Payroll versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Element Types, Links, and Entries components, potentially allowing low-privilege attackers with HTTP network access to create, delete, or modify critical data or all...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain accessible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges can access data via the HTTP network. They can also perform unauthorized updates, insertions, or deletions ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Database Server component. It may allow unauthenticated attackers to gain HTTP access, causing the service to hang or crash frequently under user...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain accessible data are possible...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may access critical data or all data through the HTTP network without proper authorization...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...

Oracle Siebel CRM End User Cross-site Request Forgery Vulnerability

The Oracle Siebel CRM End User versions from 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with Open UI components, allowing unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of accessibl...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify...

Oracle WebLogic Server security vulnerabilities

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Centralized Third-party Jars component. The exploitable vulnerabilities allow unauthenticated attackers to access the HTTP network,...

Oracle HRMS (India) security vulnerabilities

A security vulnerability exists in Oracle HRMS India versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Indian Payroll component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical or all accessible data...

Apple VisionOS Authorization Issues Vulnerability

Versions of Apple VisionOS prior to version 27 have a vulnerability related to authorization issues. This vulnerability may allow applications to access sensitive user data...

Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to log in and execute infrastructure tasks, access critical data without authorization, or gain full access to all data...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the RDBMS components. Low-privilege attackers with the permission to create sessions may access critical data through the Oracle Net network, potentially accessing...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow attackers with low privileges to access critical data or all accessible data through the HTTP network, without requiring user...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities are due to issues with the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component and are difficult to exploit. They may allow unauthenticated attackers to log into PeopleSoft Enterprise PeopleTools to execute...