Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow highly privileged attackers to log in, gain access to infrastructure, and perform unauthorized access to...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. They may allow low-privilege attackers to access critical data via the HTTP network, to access all accessible data without authorization, as well as to...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component, which may allow low-privilege attackers to log in and access the infrastructure, potentially leading to unauthorized access to...

Apple iOS Authorization Issue Vulnerability

Versions of Apple iOS prior to version 27 and Apple iPadOS prior to version 27 have a vulnerability related to authorization issues. This vulnerability may allow applications to access sensitive user data...

Oracle WebCenter Content: Vulnerabilities in Permissions, Licensing, and Access Control

Oracle WebCenter Content 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Content Server component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, as well...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain unauthorized access to critical data or all data by accessing the physical communication segmen...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers may gain access to critical data or all accessible data by accessing the physical communication segment...

Oracle Payroll security vulnerability

Oracle Payroll versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, enabling them to update, insert, or delete certain accessible data...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network connections...

Oracle Siebel Apps - Marketing security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability. This vulnerability stems from issues within the Marketing component, which may allow unauthenticated attackers to exploit HTTP-based access to perform attacks. However, user interaction is required for such attacks ...

Oracle Demand Planning security vulnerability

Versions 12.1 and 12.2 of Oracle Demand Planning contain a security vulnerability stemming from an issue in the Internal Operations component. This vulnerability may allow unauthenticated attackers to gain HTTP access via network interactions requiring user interaction. It affects other products,...

Oracle iProcurement security vulnerability

A security vulnerability exists in Oracle iProcurement versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow unauthenticated attackers to access, create, delete, or modify critical data or all data, as well as view critical da...

Oracle Customer Care security vulnerabilities

Oracle Customer Care versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow unauthorized attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or...

Oracle US Federal Human Resources security vulnerability

A security vulnerability exists in Oracle US Federal Human Resources versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with limited privileges to gain HTTP access, thereby accessing critical data without...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, or...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Portal SEC component. Unauthenticated attackers can gain access via HTTP, potentially leading to unauthorized access to critical data or all...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.4 has an authorization issue vulnerability. This vulnerability stems from issues with the Image Packaging System component. It may allow unauthorized attackers to access the network via HTTP, requiring user interaction. As a result, unauthorized access to critical data or all da...

Oracle JD Edwards EnterpriseOne Tools Authorization Vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Installation Security component. They may allow unauthorized attackers to access via an HTTPS network, unauthorized creation, deletion, or...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Import component, which may allow unauthorized attackers to log in and access the infrastructure, potentially leading to unauthorized access to critical data or all accessible data...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data through HTTP network requests, as well as access all accessible data...