Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Design/Logic Flaw

Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. The supported version that is affected is 13.5.0.0. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment...

CVE-2024-20967

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM...

CVE-2024-20926

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Scripting. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition:...

CVE-2024-20914

The CVE-2024-20914 issue concerns Oracle ZFS Storage Appliance Kit 8.8. The vulnerability is linked to the Core component and stems from insufficient input validation, enabling a high-privilege attacker with local access to compromise the kit and gain unauthorized read access to a subset of data....

Oracle One-to-One Fulfillment Security Vulnerability

Oracle One-to-One Fulfillment is a centralized mechanism used by Oracle Corporation USA to manage the realization that fulfillment is the process of collecting and distributing information to customers. A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2....

Security Vulnerabilities in Selected Oracle Products

Oracle Java SE and Oracle GraalVM are both products of Oracle Corporation.Oracle Java SE is a product for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM is a set of on-the-fly compilers written in the Java language...

Oracle ZFS Storage Appliance Security Vulnerability

Oracle ZFS Storage Appliance is a flash-enabled, petabyte-scale file storage with built-in Oracle database from Oracle Corporation USA. A security vulnerability exists in Oracle Systems' Oracle ZFS Storage Appliance Kit version 8.8. An attacker could exploit the vulnerability to access sensitive...

Oracle Financial Services Applications Security Vulnerability

Oracle Financial Services Applications is a set of financial services software from Oracle. The product includes core banking, online banking and property management, etc. Financial Services Analytical Applications Infrastructure is one of the financial services analytical applications...

Oracle Outside In Technology Security Vulnerability

Oracle Outside In Technology is a suite of software development kits SDKs from Oracle Corporation that provide developers with a comprehensive solution for extracting, normalizing, cleaning, converting, and viewing content in 600 unstructured file formats. A security vulnerability exists in Oracl...

Oracle Installed Base Security Vulnerability

Oracle Installed Base is a project lifecycle management application from Oracle Corporation Oracle. It provides enterprise-wide internal lifecycle project management and tracking capabilities. A security vulnerability exists in Oracle Installed Base versions 12.2.3 through 12.2.13 of Oracle...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Customer...

Oracle Enterprise Manager Base Platform Security Vulnerability

Oracle Enterprise Manager Base Platform is a set of local management platform of Oracle Oracle. The platform is primarily used to manage Oracle product deployments. A security vulnerability exists in Oracle Enterprise Manager Base Platform version 13.5.0.0 for Oracle Enterprise Manager. An attack...

Oracle BI Publisher Security Vulnerability

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher versions 6.4.0.0.0, 7.0.0.0.0, and 12.2.1.4.0. A...

Oracle E-Business Suite Security Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management, and other capabilities. iStore is one of the e-business applications that...

Oracle Java SE and Oracle GraalVM Security Vulnerabilities

Oracle Java SE and Oracle GraalVM are both products of Oracle Corporation.Oracle Java SE is a product for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM is a set of on-the-fly compilers written in the Java language...

Oracle Java SE Security Vulnerability

Oracle Java SE is a U.S. Oracle Corporation Oracle for the development and deployment of Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in Oracle Java SE. The vulnerability allows an attacker to gain unauthorized access to...

Oracle BI Publisher Security Vulnerability

Oracle BI Publisher is a reporting solution from Oracle Corporation USA that makes it easier and faster to create, manage and deliver all reports and documents than traditional reporting tools. A security vulnerability exists in Oracle BI Publisher version 12.2.1.4.0 for Oracle Analytics. An...

PT-2024-1216 · Oracle · Oracle Enterprise Manager Base Platform

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Manager Base Platform version 13.5.0.0 Description: The issue is related to insufficient input validation in the Log Management component, allowing an unauthenticated attacker with network access via HTTP to compromise the...