Oracle Complex Maintenance Repair And Overhaul security vulnerabilities

Oracle Complex Maintenance Repair And Overhaul has security vulnerabilities. These vulnerabilities stem from issues with the LOV component and are difficult to exploit. Unauthorized attackers may access critical data or all accessible data via the HTTP network, and unauthorized access to critical...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-common-concurrency-limits component. Unauthenticated attackers can access through the HTTP network, resulting in unauthorized updates, insertions, or deletions ...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. Attackers with low permissions may be able to access the system via the HTTP network,...

Oracle MySQL Connectors security vulnerabilities

Oracle MySQL Connectors version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Connector/J component. Unauthorized attackers may gain network access through various protocols. In situations where user interaction is required, unauthorized updates,...

Oracle Siebel CRM Deployment: Permissions, Licensing, and Access Control Vulnerabilities

The Oracle Siebel CRM Deployment from version 17.0 to 26.9 has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or gain full access to all da...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions of Oracle Mobile Field Service from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Admin UI components. They may allow unauthenticated attackers to access through the HTTP network, to create,...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component. Attackers with low privileges can access data via the HTTP network. They can also perform unauthorized updates, insertions, or deletions ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Portal component, which may allow low-privilege attackers to access data through the HTTP network, enabling unauthorized access to certain accessible...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorized updates, insertions, or deletions of certain...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Database Actions component. They may allow high-privilege attackers to access through the HTTP network, enabling unauthorize...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They could allow attackers with high privileges to log in and execute infrastructure-related tasks. Unauthorized updates, insertions, or deletions of...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through the HTTP network. They can also perform unauthorized updates, insertions, or...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the BI Platform Security component. It may allow attackers with low privileges to access through the HTTP network, to perform unauthorized updates, insertions, or...

Oracle Java SE security vulnerabilities

Security vulnerabilities exist in Oracle Java SE versions 8u503, 8u503-perf, and 11.0.32.1; in Oracle GraalVM versions 17.0.20.1 and 21.0.12.1; and in Oracle GraalVM Enterprise Edition version 21.3.19.1.1. These vulnerabilities stem from issues within the JGSS component, potentially allowing...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.2. This vulnerability stems from issues with the General component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of Oracle REST Data Services...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.2.1. This vulnerability stems from issues within the GraphQL component and may allow low-privilege attackers to gain unauthorized access via HTTP, thereby accessing critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Business Logic Infra SEC component, potentially allowing low-privilege attackers to access the JDENET network. Such attackers may make...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Data Mover component and may allow attackers with elevated privileges to log in, modify the infrastructure, update, insert, or delete certain dat...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues in the Portal component and may allow low-privilege attackers to access certain accessible data via HTTP requests while interacting with users, thereby...