CVE-2025-10641 Unencrypted cleartext communication in EfficientLab WorkExaminer Professional

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...

Rockwell Automation 1783-NATR

RISK EVALUATION Successful exploitation of these vulnerabilities could result in a denial-of-service, data modification, or in an attacker obtaining sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

Object-Relational Mapping (ORM) Leak

An Object-Relational Mapping ORM Leak vulnerability occurs when an application does not properly control how user-provided data is passed to the ORM. An attacker can exploit this by manipulating input parameters to query fields that are not intended to be exposed. This can lead to the disclosure ...

Oracle Database Server security vulnerabilities

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server for Java VM versions 19.3 through 19.28,...

PT-2025-42933

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.9 through 8.0.8.7 Oracle Financial Services Analytical Applications Infrastructure version 8.1.2.5 Description An easily exploitable issue exists in the Oracle...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a suite of fully integrated global business management software from Oracle Corporation USA. The software provides customer relationship management, service management, financial management, etc. Applications Manager is one of the components used to monitor the...

PT-2025-42953

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.9.4 Description An easily exploitable issue exists in Oracle JD Edwards EnterpriseOne Tools component: Object and Environment Tech that allows an unauthenticated attacker with...

PT-2025-42940

Name of the Vulnerable Software and Affected Versions Oracle Product Hub versions 12.2.3 through 12.2.14 Description An issue exists in the Oracle Product Hub component of Oracle E-Business Suite that allows a low-privileged attacker with network access via HTTP to compromise the system. Successf...

PT-2025-42949

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description An easily exploitable issue exists in the Oracle Workflow product’s Workflow Notification Mailer component of Oracle E-Business Suite. An unauthenticated attacker with network...

PT-2025-42960

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description An easily exploitable issue exists in the PeopleSoft Enterprise PeopleTools PIA Core Technology component. A low-privileged attacker with network access via HTTP can compromise the syste...

PT-2025-42951

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.43 Oracle MySQL versions 8.4.0 through 8.4.6 Oracle MySQL versions 9.0.0 through 9.4.0 Description A flaw exists in the InnoDB component of Oracle MySQL Server. A high-privileged attacker with network...

Oracle PeopleSoft security vulnerabilities

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

Oracle PeopleSoft security vulnerabilities

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, supplier relationship management, and other capabilities.PeopleSoft Enterprise PeopleTools is one of the tools and...

Oracle JD Edwards security vulnerabilities

Oracle JD Edwards is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation USA. The product offers application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards' JD...

Oracle JD Edwards security vulnerabilities

Oracle JD Edwards is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation USA. The product offers application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD Edwards' JD...

Oracle Essbase security vulnerabilities

Oracle Essbase is an application from Oracle Corporation USA. enables organizations to quickly generate insights from multidimensional data sets using what-if analysis and data visualization tools. A security vulnerability exists in Oracle Essbase version 21.7.3.0.0, which originates from an HTTP...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation USA. The software provides customer relationship management, service management, financial management, and more. iStore is one of the e-business applications that enable merchants to...

PT-2025-42945

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft versions 8.60 through 8.62 Description A flaw exists within the Rich Text Editor component of Oracle PeopleSoft Enterprise PeopleTools. This issue allows a low-privileged attacker with network access via HTTP to compromise th...

PT-2025-42957

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards versions 9.2.0.0 through 9.2.9.4 Description An easily exploitable issue exists in the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools. An unauthenticated attacker with network access via HTTP can compromis...

PT-2025-42968

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description An easily exploitable issue exists in the Oracle Applications Framework component of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...