Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Attackers with low privileges and access to the network via HTTP may be able to unauthorizedly create, delete, or modify critical data or all...

Oracle WebLogic Server Proxy Plug-in security vulnerabilities

The Oracle WebLogic Server Proxy Plug-in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. Unauthorized attackers can exploit these vulnerabilities ...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They could allow low-privilege attackers to log in and access infrastructure, thereby enabling unauthorized updates, insertions...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 21.12.0 to 21.12.17 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthorized attackers to access through the HTTP network. This could result in unauthorized creation, deletion, or modification of...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...

Oracle MySQL Server security vulnerabilities

Security vulnerabilities exist in Oracle MySQL Server versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1, as well as in Oracle MySQL Cluster versions 8.0.0 through 8.0.49, 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1. These vulnerabilities stem...

Oracle Communications BRM – Elastic Charging Engine security vulnerability

Oracle Communications BRM – Elastic Charging Engine versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from Core component issues, which may allow low-privilege attackers to log in and access infrastructure, leading to unauthorize...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1; as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, contain security vulnerabilities. These vulnerabilities stem from issues with t...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM version 2.6 has a security vulnerability. This vulnerability stems from issues with the Acollect component, which may allow unauthorized attackers to access critical data or all accessible data through the TLS network without proper authentication...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OIDC component. Unauthorized attackers may gain access through the HTTP network, allowing them to access critical data or all accessible data under user interaction...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Approvals component. Unauthorized attackers may gain access through the HTTP network. This allows them to perform unauthorized updates, insertions, or deletions of certain...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebSocket component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data without proper authorization...

Oracle Shipping Execution security vulnerability

Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data and all accessible data via the HTTP network. Additionally, they may...

Oracle iSupplier Portal security vulnerabilities

The Oracle iSupplier Portal versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. This may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access through an HTTPS network. Unauthorized data reading...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Fluid Core component. Unauthorized attackers with low privileges may access the system via the HTTP network. This allows them to perform unauthorized...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or deletions of...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through the HTTP network. After user interaction, unauthorized...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core component. They may allow attackers with low privileges to access the system via the HTTP network, enabling unauthorized updates, insertions, or deletions of...