Oracle Applications Framework security vulnerabilities

Oracle Applications Framework versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Web Utilities component. They could allow attackers with high privileges to access critical data or all accessible data via the HTTP network, without proper...

Oracle Payroll security vulnerability

A security vulnerability exists in Oracle Payroll versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Element Types, Links, and Entries components, potentially allowing low-privilege attackers with HTTP network access to create, delete, or modify critical data or all...

Stormshield Network Security Authorization Issue Vulnerability

Stormshield Network Security versions 4.3.0 to 4.3.44, 4.8.0 to 4.8.19, 5.0.0 to 5.0.9, and 5.1.0 to 5.1.3 have an authorization issue vulnerability. This vulnerability arises from a failure in the dynamic data file signature check; there are logical errors in the signature verification routine,...

TYPO3: Coding.ms authorization issue vulnerability

TYPO3: There are authorization issues and vulnerabilities in versions prior to 6.0.0, 6.3.0, 5.0.0, 5.21.1, and 4.9.4. These vulnerabilities stem from an unvalidated data source for PayPal payment notifications. Any visitor to a website could override stored payment notifications for orders that...

tox-dev filelock: race condition issue

The tox-dev filelock version 3.20.4 up to version 4.2.1 has a race condition vulnerability. This vulnerability stems from the ReadWriteLock mechanism, which allows SQLite to reopen databases and associated files by their names. Attackers with renaming privileges on POSIX systems can replace these...

Apple VisionOS Authorization Issues Vulnerability

Versions of Apple VisionOS prior to version 27 have a vulnerability related to authorization issues. This vulnerability may allow applications to access sensitive user data...

TYPO3 File Manager SQL Injection Vulnerability

Versions of the TYPO3 File Manager prior to 3.1.3 have a SQL injection vulnerability. This vulnerability arises from the file search function, which escapes LIKE wildcards only when constructing database query conditions, but does not escape quotes. Attackers can alter the database queries with...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has a security vulnerability. This vulnerability stems from issues with the Content Server component, which may allow attackers with low privileges to access through the HTTP network and unauthorizedly read certain accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. This could allow low-privilege attackers to log into the infrastructure where the vulnerabilities reside,...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to create, delete, or modify critical data or all data...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, which may allow unauthorized attackers to access through the JDENET network. Unauthorized updates, insertions, or deletions...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the LDAP component. They may allow unauthorized attackers to access through the HTTP network, to perform unauthorized updates, insert or delete certain...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow unauthorized attackers to access via TLS networks, to create, delete, or modify critical data or all...

Oracle PeopleSoft Enterprise FIN Cash Management security vulnerabilities

The Oracle PeopleSoft Enterprise FIN Cash Management 9.2 version has a security vulnerability. This vulnerability stems from issues with the Cash Management component. It requires user interaction to be exploited. Attackers with high privileges who log in to the infrastructure running this produc...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Core component. It may allow unauthorized attackers to access critical data or all data via the HTTP network, and may cause partial denial-of-service attacks...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow unauthorized attackers to access key data, all data, as well as update, insert, or delete certain data through...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow attackers with low privileges to access the network and launch attacks via HTTP. These attackers can...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of certain accessible data are possible...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers with network access to unauthorizedly access critical data or all data via HTTP. Additionall...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized...