Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/Python component. Unauthorized attackers may gain network access through various protocols, potentially allowing them to access critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow attackers with low privileges to access the product via the JDENET network, to create, delete, or modify...

Oracle HRMS (US) security vulnerabilities

The Oracle HRMS US versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-grpc-server component. Unauthorized attackers may gain access through HTTP/2 networks, allowing them to perform unauthorized updates, insert or delete certain accessible...

Oracle Marketing security vulnerabilities

Oracle Marketing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Audience component. They may allow unauthorized attackers to access key data or all data via the HTTP network, as well as to update, insert, or delete certain data without...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Documents component. Attackers with low privileges may access critical data or all data through the HTTP network without proper authorization...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. Th...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Integration Broker component. Unauthorized attackers may gain access through the HTTP network, requiring user interaction. This allows unauthorized access ...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certai...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to log in and execute infrastructure tasks, access critical data without authorization, or gain full access to all data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Updates Environment Mgmt component. Unauthorized attackers can access certain accessible data via the HTTP network, allowing them to perform unauthorized...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Publisher Security component. Unauthorized attackers may gain access through the HTTP network, allowing them to perform unauthorized updates, inser...

Oracle Siebel CRM End User Cross-site Request Forgery Vulnerability

The Oracle Siebel CRM End User versions from 17.0 to 26.9 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with Open UI components, allowing unauthorized attackers to access through the HTTP network. Unauthorized updates, insertions, or deletions of accessibl...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the SOA Provider component. Unauthorized attackers may gain access through HTTP network connections, resulting in unauthorized access to critica...

Oracle Common Applications security vulnerabilities

Oracle Common Applications versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Role Summary component. They are difficult to exploit. Attackers with high privileges can exploit these vulnerabilities through HTTP network access. This could lead...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Other Issues component and are difficult to exploit. They may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critic...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertions, or deletions of some...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 14.1.2.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They may allow attackers with low privileges to access critical data or all accessible data through the HTTP network, without requiring user...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible...

IBM DataStage on Cloud Pak for Data Authorization Issue Vulnerability

IBM DataStage on Cloud Pak for Data version 5.4.0.0 has an authorization issue vulnerability. This vulnerability arises from the ability of unauthenticated users to perform arbitrary writes on keys of any tenant in the shared Redis database. This compromises the credential encryption boundary and...