Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Analytics Server component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, and 11.0.32.1; in Oracle GraalVM versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within the JGSS component, potentially allowing...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM Deployment versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component, potentially allowing low-privilege attackers to gain HTTP access, thereby unauthorizedly accessing critical data or all data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Versions 8.61 and 8.62 of Oracle PeopleSoft Enterprise PeopleTools contain a security vulnerability stemming from issues in the Porting component. This vulnerability may allow attackers with elevated privileges to log into the infrastructure hosting PeopleSoft Enterprise PeopleTools, enabling the...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.2. This vulnerability stems from issues with the General component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of Oracle REST Data Services...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.1. This vulnerability stems from issues within the GraphQL component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

Oracle Essbase security vulnerabilities

The Oracle Essbase version 21.8.3.0.0 contains a security vulnerability stemming from an issue in its Security component. This vulnerability may allow low-privilege attackers to gain HTTP access, thereby enabling unauthorized access to critical data or all data at large...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Data Mover component and may allow attackers with elevated privileges to log in, modify the infrastructure, update, insert, or delete certain dat...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow low-privilege attackers to access certain accessible data via HTTP requests while interacting with users, thereby...

Oracle HRMS (US) security vulnerabilities

A security vulnerability exists in Oracle HRMS US versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component, potentially allowing attackers with limited privileges to access HTTP-based networks and obtain unauthorized access to critical data or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component, potentially allowing unauthenticated attackers to gain HTTP access and unauthorized access to critic...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow unauthenticated attackers to access it via HTTP, enabling unauthorized updates, insertions, or deletions of certain...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues within the Oracle JDeveloper component. This vulnerability may allow highly privileged attackers to log in and execute infrastructure tasks, thereby creating, deleting, or modifying...

Oracle PeopleSoft Enterprise SCM Purchasing security vulnerability

Oracle PeopleSoft Enterprise SCM Purchasing version 9.2 contains a security vulnerability stemming from issues in the Supplier Registration component. This vulnerability may allow low-privilege attackers to perform unauthorized updates, inserts, or deletions of certain accessible data via HTTP, a...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow low-privilege attackers to log in, perform infrastructure operations, create, delete, o...

Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow unauthenticated attackers to create, delete, or modify critical data or all data, as well as access such...

Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow attackers with limited privileges to log in, execute infrastructure tasks, access critical data without...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 2.6 contains a security vulnerability stemming from an issue in the Acollect component. This vulnerability may allow unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to critical data or all accessible data...