Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Fluid Core component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates,...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Backend-as-a-Service component and may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can unauthorizedly update, insert, ...

Oracle Enterprise Manager for Oracle Database security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Oracle Database contain a security vulnerability stemming from issues in the Data Guard Management component. This vulnerability may allow low-privilege attackers to gain control over Oracle Enterprise Manager for Oracle Database via HTTP...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to access certain Oracle Purchasing data via HTTP, enabling unauthorized updates, insertions, o...

Oracle Siebel CRM Deployment permission and access control issue vulnerability

Versions 17.0 through 26.9 of Oracle Siebel CRM contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Server Infrastructure component, potentially allowing low-privilege attackers to log in and execute infrastructure tasks. They...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow high-privilege attackers to log in and access the infrastructure, enabling them to create, delete, or modify...

Oracle Communications Unified Inventory Management security vulnerabilities

Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 have security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow unauthorized attackers to access critical data through HTTP network...

Oracle Java SE resource management error vulnerability

Versions 8u503, 21.0.12, 25.0.4, and 27 of Oracle Java SE, as well as version 21.3.19.1.1 of Oracle GraalVM Enterprise Edition contain a resource management error vulnerability. This vulnerability stems from improper use-after-free issues in JavaFX components. Unauthenticated attackers can exploi...

Oracle Access Manager security vulnerabilities

Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Authentication Engine component. As a result, unauthenticated attackers may be able to access the network, unauthorizedly create, delete, or modify critical data...

Oracle WebLogic Server security vulnerabilities

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Centralized Third-party Jars component. The exploitable vulnerabilities allow unauthenticated attackers to access the HTTP network,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Monitoring and Diagnostics SEC component. It may allow low-privilege attackers to create, delete, or modify critical data or all accessible...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access, interact with users, and unauthorizedly...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. Unauthorized attackers may gain access through the Oracle Net network, allowing them to access critical data or all...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from issues within the Database Actions component. It may allow attackers with elevated privileges to perform network access via HTTP, unauthorized updates, insertions, or deletio...

Oracle JD Edwards EnterpriseOne Tools authorization issue vulnerability

Versions 9.2.0.0 through 9.2.26.5 of Oracle JD Edwards EnterpriseOne Tools contain an authorization issue vulnerability. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow unauthenticated attackers to gain HTTP access. Such attackers can then...

Oracle Siebel CRM End User Security Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Open UI component. Unauthorized attackers may gain access through the HTTP network, resulting in unauthorized updates, insertion, or deletion of some accessible data, as...

Oracle Siebel CRM Deployment security vulnerability

A security vulnerability exists in Oracle Siebel CRM versions 17.0 through 26.9. This vulnerability stems from issues within the Server Infrastructure component and is difficult to exploit. It may allow unauthenticated attackers to access HTTP-based networks, thereby creating, deleting, or...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Transaction Entry component. Unauthorized attackers with low privileges may access critical data or all accessible data via the HTTP network...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. They may allow low-privilege attackers to access critical data via HTTP, enabling unauthorized access to key data or full access to...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. Unauthorized attackers may gain access through the T3 and IIOP networks. They may also perform unauthorized updates, insertions, or deletions of certain accessible...