Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthorized attackers may access key data or all accessible data via the HTTP network. They may also create, delet...

Oracle Shipping Execution security vulnerability

The Oracle Shipping Execution versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Workflow Events component. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all accessible...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/Python component. Unauthorized attackers may gain network access through various protocols, potentially allowing them to access critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow attackers with low privileges to access the product via the JDENET network, to create, delete, or modify...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-grpc-server component. Unauthorized attackers may gain access through HTTP/2 networks, allowing them to perform unauthorized updates, insert or delete certain accessible...

Oracle Marketing security vulnerabilities

Oracle Marketing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Audience component. They may allow unauthorized attackers to access key data or all data via the HTTP network, as well as to update, insert, or delete certain data without...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may access critical data or all data through the HTTP network without proper authorization...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Application Server component. It may allow unauthorized attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates, insertions, or deletions of...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. Th...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Integration Broker component. Unauthorized attackers may gain access through the HTTP network, requiring user interaction. This allows unauthorized access ...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certai...

Python Packaging Authority virtualenv resource management error vulnerability

The Python Packaging Authority’s virtualenv version 21.14.8 to 21.14.10 has a resource management vulnerability. This vulnerability arises from the app-data seeder, which may cause the environment to link to temporary package files that are deleted after creation. This state can be enabled throug...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to log in and execute infrastructure tasks, access critical data without authorization, or gain full access to all data...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the RDBMS components. Low-privilege attackers with the permission to create sessions may access critical data through the Oracle Net network, potentially accessing...

Oracle Identity Manager Connector security vulnerabilities

Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP Gateway component. As a result, unauthorized attackers may gain access through the TCP network. They are allowed to create, delete, or modify...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Publisher Security component. Unauthorized attackers may gain access through the HTTP network, allowing them to perform unauthorized updates, inser...

Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through HTTP network requests, allowing them to perform unauthorized updates, insert dat...