Oracle Siebel CRM End User Cross-site Request Forgery Vulnerability

The Oracle Siebel CRM End User versions from 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with Open UI components, allowing unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of accessibl...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critica...

Oracle Common Applications security vulnerabilities

Oracle Common Applications versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Role Summary component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. This could lead...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other Issues component and are difficult to exploit. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critic...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the REST components, allowing unauthorized attackers to access through the HTTP network. Unauthorized data can be read under user interaction...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertions, or deletions of some...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow low-privilege attackers to access critical data or all data through HTTP network interactions, without user...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow attackers with low privileges to access critical data or all accessible data through the HTTP network, without requiring user...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Versions 12.2.1.4.0 and 14.1.2.0.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Core components, potentially allowing attackers with low privileges to access through the SOAP network and unauthorizedly read certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

IBM DataStage on Cloud Pak for Data Authorization Issue Vulnerability

IBM DataStage on Cloud Pak for Data version 5.4.0.0 has an authorization issue vulnerability. This vulnerability arises from the ability of unauthenticated users to perform arbitrary writes on keys of any tenant in the shared Redis database. This compromises the credential encryption boundary and...

Oracle PeopleSoft Enterprise CC Common Application Objects security vulnerabilities

The Oracle PeopleSoft Enterprise CC Common Application Objects 9.2 version has a security vulnerability. This vulnerability allows high-privilege attackers to access data through the HTTP network. It may lead to unauthorized updates, insertions, or deletions of accessible data, as well as...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers with low privileges may access data through the HTTP network, allowing them to read certain accessible...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access through the LDAP network, allowing them to access critical data or all accessible data...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthenticated attackers can access critical data or all data through the HTTP...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or access all data tha...

Oracle Helidon authorization issue vulnerability

Oracle Helidon versions 4.0.0 to 4.5.5 have an authorization issue vulnerability. This vulnerability stems from issues with the helidon-microprofile-security component. It may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all data...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow low-privilege attackers to access through the HTTP network, potentially leading to unauthorized update...

Oracle Zfs Storage Appliance Kit security vulnerabilities

The Oracle Zfs Storage Appliance Kit version 8.8 has a security vulnerability. This vulnerability stems from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Data Transforms component. They may allow unauthorized attackers to access critical data or all data through HTTP network connections. Additionally, they may...