Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, and unauthorized updates, insertions, or deletions of certain accessible data may occ...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing unauthenticated attackers to gain HTTP access and thereby access critical or all accessible data...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and may allow low-privilege attackers to log into the infrastructure running Siebel CRM Deployment, thereby gaining...

Apple macOS Path Traversal Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper path handling, which may allow applications to access protected user data...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Siebel Management Console component, which may allow attackers with physical access to unauthorized access to certain accessible data...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions 25.12 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open Integration component. Unauthorized attackers can access through the HTTP network. Without interaction from authorized users, this allows unauthorized...

Oracle JD Edwards EnterpriseOne Homebuilder security vulnerability

Oracle JD Edwards EnterpriseOne Homebuilder version 9.2 contains a security vulnerability stemming from issues in the Homebuilder Management component. This vulnerability may allow low-privilege attackers to access the JDENET network, enabling them to create, delete, or modify critical data or an...

Oracle Data Integrator security vulnerabilities

Oracle Data Integrator versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Dictionary Repository component, which may allow low-privilege attackers to gain access through SQL network interfaces and take control of Oracle Data Integrato...

Oracle Enterprise Manager Base Platform security vulnerabilities

Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security Framework component. They may allow unauthenticated attackers to access through the HTTP network, resulting in unauthorized updates, insertion of ...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues. Unauthorized attackers may gain access through the HTTP network. Key data or all accessible data may be accessed without user interaction. Additionally...

Oracle Identity Manager Connector security vulnerabilities

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities are caused by issues with the SAP ERP+ component. They may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, o...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions of Oracle Siebel CRM Cloud Applications from 22.3 to 26.9 contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical...

Oracle Siebel CRM Cloud Applications: Permissions, Licensing, and Access Control Vulnerabilities

Versions 22.3 to 26.9 of Oracle Siebel CRM Cloud Applications contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Siebel Cloud Manager component, allowing low-privilege attackers to access through the HTTP network, thereby...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network access...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow unauthorized attackers to access critical data or access all accessible data by accessing the physical...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the Core component; unauthenticated attackers can access it via HTTP. Under user interaction, unauthorized updates, insertions, or deletions of certain accessible...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow attackers with low privileges to log in and execute infrastructure operations, such as unauthorized updates,...

Oracle JD Edwards EnterpriseOne Orchestrator: Vulnerabilities in Permission Management and Access Control

Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access to the...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. Unauthorized attackers may gain access through HTTP network connections, allowing...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Versions 8.61 and 8.62 of Oracle PeopleSoft Enterprise PeopleTools contain a security vulnerability stemming from issues in the Query component. This vulnerability may allow highly privileged attackers to gain HTTP access, resulting in service suspension or frequent crashes. It also enables...