Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues in the helidon-common-mapper component, potentially allowing unauthenticated attackers to gain HTTP access. They may create, delete, or modify critical data or all...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Fluid Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates,...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Oracle Diagnostics Interfaces component, potentially allowing unauthenticated attackers to gain HTTP access, thereby gaining unauthorized access to...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Backend-as-a-Service component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can unauthorizedly update, insert, ...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues in the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTTP...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to access certain Oracle Purchasing data via HTTP, enabling unauthorized updates, insertions, o...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks. They...

Oracle PeopleSoft Enterprise FIN General Ledger Brazil security vulnerabilities

Oracle PeopleSoft Enterprise FIN General Ledger Brazil version 9.1 contains a security vulnerability stemming from issues within the General Ledger component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby unauthorizedly updating, insertin...

Oracle PeopleSoft Enterprise FIN Product Configurator Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Product Configurator Brazil version 9.1 contains a security vulnerability stemming from issues within the Product Configurator component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby unauthorizedly...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow high-privilege attackers to log in and access the infrastructure, enabling them to create, delete, or modify...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access critical data through HTTP network...

Oracle Java SE resource management error vulnerability

Versions 8u503, 21.0.12, 25.0.4, and 27 of Oracle Java SE, as well as version 21.3.19.1.1 of Oracle GraalVM Enterprise Edition contain a resource management error vulnerability. This vulnerability stems from improper use-after-free issues in JavaFX components. Unauthenticated attackers can exploi...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthenticated attackers may be able to access the network, unauthorizedly create, delete, or modify critical data...

Oracle WebLogic Server security vulnerabilities

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Centralized Third-party Jars component. The exploitable vulnerabilities allow unauthenticated attackers to access the HTTP network,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthorized, unauthenticated attackers to access critical data or all data, as well as to...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component. They may allow unauthorized attackers to access physical communication segments, unauthorizedly create, delete...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow low-privilege attackers to create, delete, or modify critical data or all accessible...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from an issue with the Interoperability SEC component, potentially allowing unauthenticated attackers to access the system via the HTTPS network. It may enable...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access, interact with users, and unauthorizedly...