Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle Shipping Execution security vulnerability

A security vulnerability exists in Oracle Shipping Execution versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Workflow Events component and may allow unauthenticated attackers to gain access via HTTP, thereby gaining unauthorized access to critical data or full...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access critical data and all accessible data through the HTTP...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow attackers with limited privileges to gain network access. They can then create, delete,...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Enterprise Infrastructure SEC component, which may allow unauthenticated attackers to access critical data or all accessible data through the JDENET...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and is difficult to exploit. However, it may allow attackers with low privileges who can log in to JD...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with high privileges to access via the HTTP network, unauthorizedly create, delete, or modify critical da...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.2.2 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow low-privilege attackers to access critical data through the HTTP network, without proper authorization, or to access all accessible da...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data and all accessible data via the HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...

Oracle Communications Billing and Revenue Management Authorization Issues Vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have authorization issues. This issue stems from problems with the BRM Server component. It may allow unauthorized attackers to access the network via HTTP, thereby enabling them to...

Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component and may allow low-privilege attackers to access certain accessible data via HTTP without authorization...

Oracle Applications Manager security vulnerabilities

A security vulnerability exists in Oracle Applications Manager versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Diagnostics component and may allow low-privilege attackers to access HTTP-based networks, read certain data without authorization, and even cause partia...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the EDI component. An attacker with low privileges and who can access via HTTP may be able to compromise the Oracle EDI Gateway and affect other products. This could result in...

Oracle Identity Manager Connector security vulnerability

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager Connector contain a security vulnerability stemming from issues with the Generic REST component. This vulnerability may allow low-privilege attackers to log in and execute infrastructure tasks, thereby creating, deleting, or modifying...

Oracle Siebel CRM Development Security Vulnerabilities

The Oracle Siebel CRM Development from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Integration-Scripting component. They could allow high-privilege attackers to access through the CORBA network, resulting in service hangs or frequent crashes...

IBM Guardium Data Protection encryption vulnerability

IBM Guardium Data Protection versions 12.1 and 12.2 have vulnerabilities related to encryption. These vulnerabilities stem from the use of hardcoded encryption keys, which may allow remote attackers to obtain sensitive information...

Oracle Java SE security vulnerabilities

Oracle Java SE versions 21.0.12.1, 25.0.4.1, and 27 have security vulnerabilities. These vulnerabilities stem from issues with the Security component and are difficult to exploit. Unauthorized attackers may gain network access through various protocols, and unauthorized updates, insertions, or...