Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability allows high-privilege attackers to access data through the HTTP network. It may lead to unauthorized updates, insertions, or deletions of accessible data, as well as...

Oracle Essbase security vulnerabilities

The Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all data at large...

Oracle Java SE permission licensing and access control issues

In Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products, there are vulnerabilities related to permission management and access control. These vulnerabilities exist in Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions;...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues within the Oracle JDeveloper component. This vulnerability may allow highly privileged attackers to log in and execute infrastructure tasks, thereby creating, deleting, or modifying...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access, interact with users, and unauthorizedly...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. This could allow low-privilege attackers to log into the infrastructure where the vulnerabilities reside,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Open Query component, which may allow attackers with high privileges and logged-in status to unauthorizedly access certain accessible data...

IBM DataStage on Cloud Pak for Data Authorization Issue Vulnerability

IBM DataStage on Cloud Pak for Data version 5.4.0.0 has an authorization issue vulnerability. This vulnerability arises from the ability of unauthenticated users to perform arbitrary writes on keys of any tenant in the shared Redis database. This compromises the credential encryption boundary and...

Apache Tomcat buffer error vulnerability

The Apache Tomcat 11.0.0-M25 version to 11.0.26 version has a buffer overflow vulnerability. This vulnerability stems from a buffer underflow, where large non-blocking writes may cause the response body to be split between the current request and the next request on that connection. This results ...

JD JoySafeter: Vulnerabilities in permission management and access control mechanisms

JD JoySafeter versions 1.0.0 and earlier have vulnerabilities related to permission licensing and access control. These vulnerabilities arise from the execute tool in Copilot’s standard mode not implementing sandbox isolation. After authenticated users select the standard mode in the WebSocket...

Oracle Order Management security vulnerability

A security vulnerability exists in Oracle Order Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Product Diagnostic Tools component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network...

Oracle Complex Maintenance Repair And Overhaul security vulnerabilities

Oracle Complex Maintenance Repair And Overhaul has security vulnerabilities. These vulnerabilities stem from issues with the LOV component and are difficult to exploit. Unauthorized attackers may access critical data or all accessible data via the HTTP network, and unauthorized access to critical...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, enabling unauthorized access to key data or full access to all data accessib...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Publisher Security component. Unauthorized attackers may gain access through the HTTP network, allowing them to perform unauthorized updates, inser...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient component. Unauthorized attackers may gain access through the HTTP network, allowing them to read unauthorized access to certain data available on...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues in the helidon-common-mapper component, potentially allowing unauthenticated attackers to gain HTTP access. They may create, delete, or modify critical data or all...

Oracle PeopleSoft Enterprise FIN Inventory Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1 contains a security vulnerability stemming from an issue in the Inventory component. This vulnerability may allow attackers with limited privileges to log in and execute infrastructure tasks, thereby performing unauthorized updates,...

Oracle Helidon authorization issue vulnerability

Oracle Helidon versions 4.0.0 to 4.5.5 have an authorization issue vulnerability. This vulnerability stems from issues with the helidon-microprofile-security component. It may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all data...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 and 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-idcs-mapper component. They may allow low-privilege attackers to log in and access infrastructure, unauthorized access to critical...