Oracle PeopleSoft Enterprise FIN Common Objects Brazil security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Brazil version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow attackers with elevated privileges to create, delete, or modify critical data or all data by accessing the physical...

Oracle Installed Base security vulnerabilities

Oracle Installed Base versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Create Item Instance component. Vulnerable attackers may access critical data or all data through HTTP network interactions without proper authorization. They may also...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 contains a security vulnerability stemming from an issue in the Services component. This vulnerability may allow low-privilege attackers to gain network access via HTTP, leading to service hangs or frequent crashes complete denial of service, and potentially unauthorized readi...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow unauthenticated attackers to access the system over the TLS network, resulting in unauthorized access to critical data or all data, as well as...

Oracle Communications Billing and Revenue Management security vulnerability

Versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 of Oracle Communications Billing and Revenue Management contain a security vulnerability stemming from issues within the BRM Server component. Unauthenticated attackers can access these systems via the TLS network, potentially leading to...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, gain unauthorized access to key data, or access all dat...

Letta encryption problem vulnerabilities

Letta versions 0.16.8 and earlier have encryption-related vulnerabilities. This vulnerability stems from the LocalSandbox sub-process inheriting the entire server environment. Attackers can exploit this by running code via POST /v1/tools/run or custom tools, thereby reading LETTAPGURI,...

Oracle Siebel Apps – Customer Order Management security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Order Management component. Attackers with low privileges may access through the HTTP network, utilize user interactions, and unauthorizedly update, insert, or delete certain...

Oracle Report Manager security vulnerabilities

Oracle Report Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access data that can be accessed by Oracle Report Manager through an HTTPS network, allowin...

Apple macOS Information Leakage Vulnerability

Versions of Apple macOS Golden Gate prior to version 27 have a vulnerability related to information leakage. This vulnerability stems from an imperfect privacy check mechanism, which may allow applications to access sensitive user data...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, under user interaction without proper...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Panel Processor component. Exploitation is relatively difficult; low-privilege attackers can access data via the HTTP network, requiring interaction with...

Oracle Siebel Apps - Marketing security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability. This vulnerability stems from issues within the Marketing component, which may allow unauthenticated attackers to exploit HTTP-based access to perform attacks. However, user interaction is required for such attacks ...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. This may allow attackers with low privileges to access through the HTTP network and unauthorizedly create, delete, or modify...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Web Runtime SEC component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, o...

Oracle Agile PLM security vulnerability

Oracle Agile PLM version 9.3.6 contains a security vulnerability stemming from issues in its Application Server component. This vulnerability may allow low-privilege attackers to make unauthorized updates, insert or delete certain data, or read partial data via HTTP access when user interaction i...

Oracle Timesten In-memory Database security vulnerabilities

The Oracle Timesten In-memory Database versions 22.1 to 22.1.40.0 and 26.1 to 26.1.1.2.0 have security vulnerabilities. These vulnerabilities stem from issues with the Kubernetes Operator component. This may allow attackers with low privileges to access data through an HTTPS network, enabling...

Oracle JD Edwards EnterpriseOne Configurator security vulnerabilities

Oracle JD Edwards EnterpriseOne Configurator 9.2 has a security vulnerability. This vulnerability stems from issues with the Configuration Management component, which may allow attackers with low privileges to access through the HTTP network, and to unauthorizedly create, delete, or modify critic...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Item Catalog component. Vulnerable attackers may access critical data or all data through the HTTP network. They may also access unauthorized parts of data, perform updates...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management version 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow low-privilege attackers to access data through network HTTP requests, enabling unauthorized updates,...