Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. Unauthorized attackers may gain access through the HTTP network. They can update, insert, or delete certain...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Unauthorized attackers with low privileges may access critical data or all accessible data through the HTTP network...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, enabling unauthorized updates,...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. This may allow attackers with low privileges to access through the HTTP network and unauthorizedly create, delete, or modify...

Oracle Siebel CRM Cloud Applications information leakage vulnerability

Oracle Siebel CRM Cloud Applications versions 22.3 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers who are unauthenticated and have access to the physical communication segments of related hardware may gain...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with Open UI components. They may allow low-privilege attackers to access through the HTTP network, update, insert, or delete certain...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network requests without proper...

Oracle WebCenter Sites security vulnerabilities

Oracle WebCenter Sites versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebCenter Sites component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network requests...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or acces...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues with the PLSQL package component. This vulnerability may allow attackers with low privileges and network access to create, delete, or modify critical data or all accessible data via Oracle Net without...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component. Attackers with low privileges can access the system via the HTTP network, unauthorizedly create, delete, or modify critical...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from Core component problems and may allow highly privileged attackers to gain HTTP network access, interact with users, and unauthorizedly...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in and execute infrastructure tasks. They could gain unauthorized access to...

Oracle Trade Management permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Trade Management contain vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Claim LOV component. They may allow low-privilege attackers to access data through the HTTP network, requiring user...

Oracle MySQL Router permission licensing and access control issues

The Oracle MySQL Router version 26.7.0 contains vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Router: General component, which may allow unauthenticated attackers to access the system via an HTTPS network. Unauthorized attacker...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, which may allow low-privilege attackers to access data via HTTP, enabling unauthorized access to certain accessible...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as we...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow attackers with elevated privileges to create, delete, or modify critical data or all data by accessing the physical...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Create Item Instance component. Vulnerable attackers may access critical data or all data through HTTP network interactions without proper authorization. They may also...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow low-privilege attackers to gain network access via HTTP, leading to service hangs or frequent crashes complete denial of service, and potentially unauthorized readi...