Oracle Zfs Storage Appliance Kit security vulnerabilities

The Oracle Zfs Storage Appliance Kit version 8.8 has a security vulnerability. This vulnerability stems from issues with the Core component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Package Build SEC component. They may allow attackers with low privileges to access through the HTTP network, unauthorizedly create, delete, or modify...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow low-privilege attackers to log into the infrastructure running on JD Edwards EnterpriseOne...

Oracle Commerce Platform security vulnerabilities

Oracle Commerce Platform 11.4.0 has security vulnerabilities. These vulnerabilities stem from issues with the Dynamo Commerce Server component. They may allow low-privilege attackers with network HTTP access rights to unauthorizedly create, delete, or modify critical data or all accessible data, ...

Oracle Complex Maintenance Repair And Overhaul security vulnerabilities

Oracle Complex Maintenance Repair And Overhaul has security vulnerabilities. These vulnerabilities stem from issues with the LOV component and are difficult to exploit. Unauthorized attackers may access critical data or all accessible data via the HTTP network, and unauthorized access to critical...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-common-concurrency-limits component. Unauthenticated attackers can access through the HTTP network, resulting in unauthorized updates, insertions, or deletions ...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component. Unauthorized attackers may gain network access through various protocols. In situations where user interaction is required, unauthorized updates,...

Oracle Siebel CRM Deployment: Permissions, Licensing, and Access Control Vulnerabilities

The Oracle Siebel CRM Deployment from version 17.0 to 26.9 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or gain full access to all da...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges can access data via the HTTP network. They can also perform unauthorized updates, insertions, or deletions ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain accessible...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorized updates, insertions, or deletions of certain...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorize...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They could allow attackers with high privileges to log in and execute infrastructure-related tasks. Unauthorized updates, insertions, or deletions of...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through the HTTP network. They can also perform unauthorized updates, insertions, or...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...

Oracle Essbase security vulnerabilities

Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from issues in its Build component. This vulnerability may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in exposure of critical data or all accessible data...