Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the SQR component, potentially allowing unauthenticated attackers to gain network access via HTTP and thereby access critical data or all accessible da...

Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, and 11.0.32.1 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 have security vulnerabilities. These vulnerabilities stem from issues with the Utility component, which may allow unauthorize...

Oracle Outside In Technology security vulnerability

Oracle Outside In Technology version 8.5.8 contains a security vulnerability stemming from issues within the Outside In Clean Content SDK component. This vulnerability may allow unauthenticated attackers to create, delete, or modify critical data or any other accessible data via HTTP access...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates, insert or delete...

CodeWithCJ SparkyFitness Authorization Issue Vulnerability

Versions of CodeWithCJ SparkyFitness prior to 0.17.0 have a vulnerability related to authorization. This vulnerability arises from a lack of authorization checks. Authorized attackers can use the DELETE /api/foods/food-variants/:id endpoint to delete food variants for other users. They can also u...

Vulnerability related to permission and access control issues in Oracle REST Data Services

Versions 24.2.0 through 26.1.0 of Oracle REST Data Services contain a vulnerability related to permission and access control issues. This vulnerability stems from an issue within the Database Actions component and may allow highly privileged attackers to gain HTTP network access, potentially...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle REST Data Services: Vulnerabilities in permission management and access control mechanisms

Oracle REST Data Services versions 24.2.0 to 26.1.0 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from ADP components, and they may allow low-privilege attackers to access through the HTTP network. Unauthorized updates, insertions, or deletion...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the UIF Open UI component. As a result, unauthorized attackers may gain access through the HTTP network, leading to unauthorized...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or acces...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Marketing component. They may allow unauthorized attackers to access through an HTTPS network, to make unauthorized updates, insert or delete certain accessible data, and to...

Oracle WebCenter Content: Imaging security vulnerabilities

Oracle WebCenter Content: Version 14.1.2.0.0 contains a security vulnerability. This vulnerability stems from issues with the Core components. It may allow attackers with low privileges to access through the HTTP network, thereby unauthorizedly creating, deleting, or modifying critical data or al...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, or deletions of certain...

Oracle WebLogic Server authorization issue vulnerability

Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an authorization issue vulnerability. This vulnerability stems from Core component issues and may allow unauthenticated attackers to access through the HTTP network. As a result, unauthorized individuals may...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the PO View Document component and may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full...

Oracle JDeveloper security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle JDeveloper contain a security vulnerability stemming from issues with the Java Business Objects component. This vulnerability may allow unauthenticated attackers to gain HTTP access, enabling them to create, delete, or modify critical data or any other...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Enterprise Infrastructure SEC component and is difficult to exploit. However, it may allow attackers with low privileges who can log in to JD...

Apple macOS Security Vulnerabilities

Versions of Apple macOS Golden Gate prior to version 27 contain security vulnerabilities. These vulnerabilities stem from improper configuration of additional authorizations, which may allow applications access to sensitive user data...

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland security vulnerability

Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland version 9.2 contains a security vulnerability stemming from issues within the Global Payroll for Switzerland component. This vulnerability may allow privileged attackers to log in and execute infrastructure tasks, perform unauthorized...