Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle...

CVE-2023-22038

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Design/Logic Flaw

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: WebClient. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks require human...

CVE-2023-22045

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,...

UBUNTU-CVE-2023-22041

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2;...

CVE-2023-22045

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6,...

CVE-2023-22038

CVE-2023-22038 affects Oracle MySQL Server (Server: Security: Privileges) with affected versions 8.0.33 and earlier. A high-privileged attacker with network access via multiple protocols could authorize data updates/inserts/deletes. Root cause and impact stated as low to moderate integrity impact...

CVE-2023-22011

CVE-2023-22011 affects Oracle BI Enterprise Edition (Analytics Server). Affected: Oracle Analytics BI EE with Analytics Server component on versions 6.4.0.0.0 and 7.0.0.0.0. Issue: easily exploitable via network (HTTP) by a low-privileged attacker, enabling unauthorized update/insert/delete of da...

PT-2023-4023 · Oracle · Oracle Hyperion Financial Reporting

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Financial Reporting version 11.2.13.0.000 Description: The issue is related to insecure privilege management in the Repository component of Oracle Hyperion Financial Reporting. It allows a low-privileged attacker with network...

WordPress WP Data Access Plugin < 5.3.11 is vulnerable to Cross Site Scripting (XSS)

Software WP Data Access Type Plugin Vulnerable versions 5.3.11 Fixed in 5.3.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6b613d773243 Credits Rafie Muhammad Patchstack Require...

Oracle Essbase 安全漏洞

Oracle Hyperion and Oracle Essbase are products of Oracle Corporation.Oracle Hyperion is a set of financial modeling applications. The software provides financial closure, report production, etc. Oracle Essbase is an application. Enables organizations to quickly generate insights from...

PT-2023-4032 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM version 9.3.6 Description: The issue is related to errors in processing input data in the WebClient component of Oracle Agile PLM. This can allow a remote attacker to gain read, modify, add, or delete access to data. Successf...

Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle Oracle. The product provides value chain planning, value chain execution, and product lifecycle management capabilities. Oracle Supply Chain's Oracle Agile PLM product has a security vulnerability that originates in...

Oracle PeopleSoft Enterprise PeopleTools 安全漏洞

Oracle PeopleSoft Enterprise PeopleTools is Oracle's technology for providing PeopleSoft applications with the ability to stay in sync with users' needs and expectations. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise PeopleTools product that originates in the Portal...

Oracle Hyperion 安全漏洞

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion's Oracle Hyperion Financial Reporting product, which arises from a...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized update, insertion, or deletion access to MySQL Server accessible data...

The vulnerability of the IBM Robotic Process Automation software lies in its authentication procedures’ flaws, which allow attackers to gain read, modify, or delete access to data.

The vulnerability of the IBM Robotic Process Automation software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

PT-2023-3965

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u371 Description The issue is related to a vulnerability in the JavaFX component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successfu...

Oracle Essbase 安全漏洞

Oracle Essbase is an application from Oracle Corporation Oracle. It enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. A security vulnerability exists in Oracle Essbase that originates in the Security and...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability in Oracle Health Sciences Applications' Oracle Health Sciences Sciences Data Management Workbench product, which originates in the Blindin...