Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. Unauthorized attackers may gain access through the T3 and IIOP networks. They may also perform unauthorized updates, insertions, or deletions of certain accessible...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Publisher Security component. Unauthorized attackers may gain access through the HTTP network, allowing them to perform unauthorized updates, inser...

Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through HTTP network requests, allowing them to perform unauthorized updates, insert dat...

Oracle Siebel CRM End User Cross-site Request Forgery Vulnerability

The Oracle Siebel CRM End User versions from 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with Open UI components, allowing unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of accessibl...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critica...

Oracle Common Applications security vulnerabilities

Oracle Common Applications versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Role Summary component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. This could lead...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other Issues component and are difficult to exploit. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critic...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Install component. It may allow unauthorized attackers to access physical communication segments, thereby enabling them to create, delete, or modify critical data or all...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the REST components, allowing unauthorized attackers to access through the HTTP network. Unauthorized data can be read under user interaction...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertions, or deletions of some...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow low-privilege attackers to access critical data or all data through HTTP network interactions, without user...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core component. It may allow low-privilege attackers with network access to attack via SOAP. This could result in unauthorized creation, deletion, or modification of...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow attackers with low privileges to access critical data or all accessible data through the HTTP network, without requiring user...

Oracle PeopleSoft Enterprise SCM Strategic Sourcing security vulnerabilities

Oracle PeopleSoft Enterprise SCM Strategic Sourcing version 9.2 has a security vulnerability. This vulnerability stems from issues with the Bidder Registration component, which may allow attackers with limited permissions and access through the network to unauthorizedly access critical data or al...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing attackers with low privileges to access through the SOAP network and unauthorizedly read certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Open Query component, which may allow attackers with high privileges and logged-in status to unauthorizedly access certain accessible data...

IBM DataStage on Cloud Pak for Data Authorization Issue Vulnerability

IBM DataStage on Cloud Pak for Data version 5.4.0.0 has an authorization issue vulnerability. This vulnerability arises from the ability of unauthenticated users to perform arbitrary writes on keys of any tenant in the shared Redis database. This compromises the credential encryption boundary and...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability allows high-privilege attackers to access data through the HTTP network. It may lead to unauthorized updates, insertions, or deletions of accessible data, as well as...