Oracle Public Sector Human Resources security vulnerabilities

Oracle Public Sector Human Resources versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Regression Testing component. This may allow attackers with low privileges to access critical data and all accessible data via the HTTP network. They may...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. They are difficult to exploit, and unauthorized attackers may gain access through...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow low-privilege attackers to access critical data or all data via the HTTP network, as well as cause certa...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Application Data Sets component. It may allow attackers with limited privileges to create, delete, or modify critical or accessible data via HTTP...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues in the ADF Databinding component. This vulnerability may allow attackers with limited privileges to access critical data or all accessible data via the SOAP network, potentially leading t...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 19.3 to 19.32, 21.3 to 21.23, and 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the Java VM component. They may allow low-privilege attackers to access through a SOCKS5 network, enabling them to create, delete, or modi...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthorized attackers to access critical data or all data through HTTP network interactions, under user interaction...

Oracle Product Lifecycle Analytics security vulnerability

Version 3.6.1 of Oracle Product Lifecycle Analytics contains a security vulnerability stemming from issues within the Installation Issues component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, thereby unauthorizedly creating, deleting, or modifyin...

Oracle Communications Unified Inventory Management security vulnerability

Versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1 of Oracle Communications Unified Inventory Management contain a security vulnerability stemming from an issue with the Security component. This vulnerability may allow attackers with limited privileges to log in to the infrastructure running...

Oracle One-to-One Fulfillment security vulnerability

A security vulnerability exists in Oracle One-to-One Fulfillment versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Documents component and may allow low-privilege attackers to create, delete, or modify critical or all accessible data via HTTP access. It can also lea...

Oracle Shipping Execution security vulnerability

A security vulnerability exists in Oracle Shipping Execution versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Workflow Events component and may allow unauthenticated attackers to gain access via HTTP, thereby gaining unauthorized access to critical data or full...

Oracle E-Business Suite Integrated SOA Gateway security vulnerabilities

The Oracle E-Business Suite Integrated SOA Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. Unauthorized attackers with low privileges may access critical data and all accessible data through the HTTP...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and may allow attackers with limited privileges to gain network access. They can then create, delete,...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Bills of Material security vulnerabilities

Oracle Bills of Material versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow attackers with high privileges to access via the HTTP network, unauthorizedly create, delete, or modify critical da...

Oracle REST Data Services security vulnerabilities

Oracle REST Data Services versions 24.2.0 to 26.2.2 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow low-privilege attackers to access critical data through the HTTP network, without proper authorization, or to access all accessible da...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access critical data and all accessible data via the HTTP network...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Notification Configuration component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This may affect other...

Oracle Project Contracts security vulnerability

A security vulnerability exists in Oracle Project Contracts versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain HTTP access, thereby accessing critical or all accessible data without...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component and may allow low-privilege attackers to access certain accessible data via HTTP without authorization...