Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers with network access to unauthorizedly access critical data or all data via HTTP. Additionall...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with HTML UI components. Unauthorized attackers may gain access through the HTTP network. Without proper authorization, unauthorized updates, insertions, or deletions of certain...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Data Provider UI component. This may allow attackers with low privileges to access critical data or all accessible data via the HTTP network. Additionally, unauthorized...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component. They may allow low-privilege attackers to log in to Oracle Essbase to access infrastructure resources. This could lead to unauthorized access to critical dat...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, enabling unauthorized access to key data or full access to all data accessib...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 and 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-idcs-mapper component. They may allow low-privilege attackers to log in and access infrastructure, unauthorized access to critical...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the ADP component. Unauthorized attackers may exploit these vulnerabilities to access the system via HTTP. This could lead to unauthorized updates, insertions, or deletio...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Backend-as-a-Service component. Unauthorized attackers may gain access through the HTTP network. This allows them to perform unauthorized updates, insertions, or...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the ADP component, which may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorize...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the ADP component. Unauthorized attackers may exploit these vulnerabilities to access the system via HTTP. This could lead to unauthorized updates, insertions, or deletio...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient component. Unauthorized attackers may gain access through the HTTP network, allowing them to read unauthorized access to certain data available on...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access critical data through HTTP network...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Mobile Application Server security vulnerabilities

Oracle Mobile Application Server versions 12.2.3 to 12.2.15 have a security vulnerability. This vulnerability stems from issues with the MWA Terminal Server component. It may allow unauthenticated attackers to access key data or all data through the HTTP network, as well as to authorize the...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They are difficult to exploit. Attackers with low privileges can attempt attacks through the HTTP network, potentially causing Oracle...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Web Server component, which may allow unauthorized attackers to access critical data or all accessible data via HTTP network connections...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow high-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow attackers with low privileges to access critical data or all data via the HTTP network. Additionally, unauthorized updates,...