Oracle Report Manager security vulnerabilities

Oracle Report Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access data that can be accessed by Oracle Report Manager through an HTTPS network, allowin...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability related to information leakage. This vulnerability stems from an imperfect privacy check mechanism, which may allow applications to access sensitive user data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, o...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...

Oracle Timesten In-memory Database security vulnerabilities

The Oracle Timesten In-memory Database versions 22.1 to 22.1.40.0 and 26.1 to 26.1.1.2.0 have security vulnerabilities. These vulnerabilities stem from issues with the Kubernetes Operator component. This may allow attackers with low privileges to access data through an HTTPS network, enabling...

Oracle JD Edwards EnterpriseOne Configurator security vulnerabilities

Oracle JD Edwards EnterpriseOne Configurator 9.2 has a security vulnerability. This vulnerability stems from issues with the Configuration Management component, which may allow attackers with low privileges to access through the HTTP network, and to unauthorizedly create, delete, or modify critic...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Item Catalog component. Vulnerable attackers may access critical data or all data through the HTTP network. They may also access unauthorized parts of data, perform updates...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data through network HTTP requests, enabling unauthorized updates,...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server, including the MySQL Server versions 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, as well as MySQL Cluster versions 8.0.0 to 8.0.49, 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, and 26.7.0 to 26.7.1, have security vulnerabilities. These vulnerabilities stem from issues with the...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow high-privilege attackers to access critical data via the HTTP network, gain unauthorized access to key information, or fully access all accessib...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow attackers with low privileges and access through the network to unauthorizedly read certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries And Tools versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. They may allow low-privilege attackers to log into the infrastructure running...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Panel Processor component. Exploitation is relatively difficult; low-privilege attackers can access data via the HTTP network, requiring interaction with...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow logged-in, low-privilege attackers to exploit the system to take control of Oracle Agile Engineering Data Manageme...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. Vulnerable attackers may gain access through an HTTPS network. Unauthorized updates, insertions, or deletions of certain accessible data are...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the RMI component, which may allow unauthorized attackers to access the network via various protocols. Unauthorized updates, insertions, or deletions of certain accessible data,...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, which may allow attackers with low permissions to log in and execute infrastructure tasks. This could lead to...

Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...