Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from an issue in the Asset Management component. This vulnerability may allow attackers with elevated privileges and network access via HTTP to create, delete, or modify critical data ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network access...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access critical data or access all accessible data by accessing the physical...

Oracle Data Integrator authorization issue vulnerability

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have an authorization issue vulnerability. This vulnerability stems from issues with the Console/Repository Explorer component, which may allow unauthenticated attackers to take control of Oracle Data Integrator through HTTP network access...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the Core component; unauthenticated attackers can access it via HTTP. Under user interaction, unauthorized updates, insertions, or deletions of certain accessible...

jcrodriguez-dis Virtual Programming Lab for Moodle Cross-Site Script Vulnerabilities

The jcrodriguez-dis Virtual Programming Lab for Moodle versions prior to 5.0.0 has a cross-site scripting vulnerability. This vulnerability stems from the unencoded filename1/filename2 parameters in the similarity/diff.php file. It may lead to reflective cross-site scripting attacks. Attackers ca...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27, as well as Oracle GraalVM for JDK versions 17.0.20.1 and 21.0.12.1, have security vulnerabilities. These vulnerabilities stem from issues with the Networking component and are difficult to exploit. They may allow...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503-perf version, 11.0.32.1 version, 17.0.20.1 version, 21.0.12.1 version, and 25.0.4.1 version and 27 version; Oracle GraalVM for JDK 17.0.20.1 version and 21.0.12.1 version; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 version have security vulnerabilities. These...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow attackers with low privileges to log in and execute infrastructure operations, such as unauthorized updates,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Process Scheduler component. They may allow low-privilege attackers to access through the HTTP network, requiring user interaction. This can lead to...

Oracle Document Management and Collaboration security vulnerabilities

Oracle Document Management and Collaboration versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Attachments component. They may allow low-privilege attackers to access critical data through HTTP network requests without user interaction. This...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Versions 8.61 and 8.62 of Oracle PeopleSoft Enterprise PeopleTools contain a security vulnerability stemming from issues in the Query component. This vulnerability may allow highly privileged attackers to gain HTTP access, resulting in service suspension or frequent crashes. It also enables...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability. This vulnerability stems from issues with the Services component, which may allow unauthorized attackers to log in to infrastructure running Oracle Solaris and to perform unauthorized updates, insertions, or deletions of accessible dat...

Oracle Solaris input validation vulnerability

Oracle Solaris 11.4 contains a vulnerability related to input validation. This vulnerability stems from issues with the Image Packaging System component, which may allow unauthenticated attackers to access systems via TLS. This could lead to unauthorized updates, insertions, or deletions of...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data or all accessible data via the HTTP network. Additionally, unauthorized updates,...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all data, unauthorized updates,...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Unauthenticated attackers can access the system via the HTTP network. User interaction is required. This may lead to unauthorized...

Oracle Email Center security vulnerability

A security vulnerability exists in Oracle Email Center versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Message Component component, potentially allowing unauthenticated attackers to gain access via HTTP. Under user interaction, they may update, insert, or delete...

Python Packaging Authority virtualenv resource management error vulnerability

The Python Packaging Authority’s virtualenv version 21.14.8 to 21.14.10 has a resource management vulnerability. This vulnerability arises from the app-data seeder, which may cause the environment to link to temporary package files that are deleted after creation. This state can be enabled throug...

Oracle Advanced Outbound Telephony permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Advanced Outbound Telephony contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component. It may allow low-privilege attackers to gain HTTP network access by...