Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Analytics Server component, which may allow attackers with low privileges and access through the network to unauthorizedly read certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools version 8.62 has a security vulnerability. This vulnerability stems from issues with the Search Framework component. Unauthorized attackers can access data via the HTTP network. With user interaction, unauthorized updates, insertions, or deletions of...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries And Tools versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. They may allow low-privilege attackers to log into the infrastructure running...

Oracle Agile Engineering Data Management security vulnerabilities

Oracle Agile Engineering Data Management 6.2.1 has a security vulnerability. This vulnerability stems from issues with the Engineering Communication Interface component. It may allow logged-in, low-privilege attackers to exploit the system to take control of Oracle Agile Engineering Data Manageme...

Oracle SOA Suite security vulnerabilities

Oracle SOA Suite versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Fabric Layer component. Vulnerable attackers may gain access through an HTTPS network. Unauthorized updates, insertions, or deletions of certain accessible data are...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503 and 8u503-perf versions have security vulnerabilities. These vulnerabilities stem from issues with the RMI component, which may allow unauthorized attackers to access the network via various protocols. Unauthorized updates, insertions, or deletions of certain accessible data,...

Oracle Siebel Apps – Vulnerabilities in Marketing Permission Settings and Access Control Mechanisms

Oracle Siebel Apps – Versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Marketing component, which may allow attackers with low permissions to log in and execute infrastructure tasks. This could lead to...

Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. They are difficult to exploit, and unauthorized attackers may gain access through...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow low-privilege attackers to access critical data or all data via the HTTP network, as well as cause certa...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Data Sets component. It may allow attackers with limited privileges to create, delete, or modify critical or accessible data via HTTP...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues in the ADF Databinding component. This vulnerability may allow attackers with limited privileges to access critical data or all accessible data via the SOAP network, potentially leading t...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the Java VM component. They may allow low-privilege attackers to access through a SOCKS5 network, enabling them to create, delete, or modi...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access critical data or all data through HTTP network interactions, under user interaction...

Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue with the Security component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle Shipping Execution security vulnerability

A security vulnerability exists in Oracle Shipping Execution versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Workflow Events component and may allow unauthenticated attackers to gain access via HTTP, thereby gaining unauthorized access to critical data or full...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access critical data and all accessible data through the HTTP...