TYPO3 File Manager SQL Injection Vulnerability

Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has a security vulnerability. This vulnerability stems from issues with the Content Server component, which may allow attackers with low privileges to access through the HTTP network and unauthorizedly read certain accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. This could allow low-privilege attackers to log into the infrastructure where the vulnerabilities reside,...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to create, delete, or modify critical data or all data...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, which may allow unauthorized attackers to access through the JDENET network. Unauthorized updates, insertions, or deletions...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP component. They may allow unauthorized attackers to access through the HTTP network, to perform unauthorized updates, insert or delete certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Porting component and are difficult to exploit. They may allow unauthenticated attackers to log into PeopleSoft Enterprise PeopleTools to execute...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow unauthorized attackers to access via TLS networks, to create, delete, or modify critical data or all...

Oracle PeopleSoft Enterprise FIN Cash Management security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Cash Management 9.2 version has a security vulnerability. This vulnerability stems from issues with the Cash Management component. It requires user interaction to be exploited. Attackers with high privileges who log in to the infrastructure running this produc...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access critical data or all data via the HTTP network, and may cause partial denial-of-service attacks...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthorized attackers to access key data, all data, as well as update, insert, or delete certain data through...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain accessible data are possible...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access through the HTTP network, to perform unauthorized updates, insertions, or deletions of certain accessible data, to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from WebLogic component issues and are difficult to exploit. Unauthenticated attackers can access critical data or all accessible data via the TLS network. This allows...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers with network access to unauthorizedly access critical data or all data via HTTP. Additionall...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with HTML UI components. Unauthorized attackers may gain access through the HTTP network. Without proper authorization, unauthorized updates, insertions, or deletions of certain...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Data Provider UI component. This may allow attackers with low privileges to access critical data or all accessible data via the HTTP network. Additionally, unauthorized...

Oracle HRMS (UK) security vulnerabilities

The Oracle HRMS UK versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...