Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow unauthenticated attackers to access through the HTTP network, potentially leading to...

Oracle One-to-One Fulfillment security vulnerabilities

Oracle One-to-One Fulfillment versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Admin Console UI components. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows unauthorized...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 21.12.0 to 21.12.17 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthorized attackers to access through the HTTP network. This could result in unauthorized creation, deletion, or modification of...

Oracle MySQL Router security vulnerabilities

The Oracle MySQL Router version 26.7.0 contains security vulnerabilities. These vulnerabilities stem from issues with the Router: General component. They may allow unauthorized attackers to access through an HTTPS network, resulting in unauthorized creation, deletion, or modification of critical...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. Unauthenticated attackers can access data via the HTTP network and exploit interactions with non-attacker users. This allows...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP without user interaction, as well...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They are difficult to exploit, and it is possible for unauthenticated attackers to access critical data or all accessible data throu...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content 12.2.1.4.0 has a security vulnerability. This vulnerability stems from issues with the Content Server component. It may allow attackers with low privileges to access through the HTTP network, enabling unauthorized updates, insertions, or deletion of certain accessible dat...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component. They are difficult to exploit. Unauthenticated attackers who have access to the hardware where Oracle WebCenter Content is located m...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Supply Chain Relationship Mgmt component. It requires user interaction and could allow low-privilege attackers to access data via the HTTP network...

Oracle JD Edwards EnterpriseOne Human Resources Management security vulnerabilities

Oracle JD Edwards EnterpriseOne Human Resources Management version 9.2 has a security vulnerability. This vulnerability stems from issues with the Human Resources component, potentially allowing unauthorized attackers to access through the HTTP network. This may lead to unauthorized updates,...

Oracle Identity Manager Connector authorization issue vulnerability

The Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 have an authorization issue vulnerability. This vulnerability stems from issues with the LDAP Gateway component. It may allow unauthorized attackers to access the LDAP network, create, delete, or modify critical data or all...

Oracle Middleware Common Libraries And Tools security vulnerabilities

Oracle Middleware Common Libraries and Tools versions 12.2.1.4.0 and 14.1.1.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Remote Diagnostic Agent component. The vulnerabilities are difficult to exploit. Unauthorized attackers can access them via the HTTP...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They may allow low-privilege attackers to access critical data via the HTTP network, unauthorized access to all accessible data, unauthorized updates, insertions, or...

Oracle Primavera P6 Enterprise Project Portfolio Management security vulnerabilities

Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0.0 to 21.12.21.9, 22.12.0.0 to 22.12.21.4, 23.12.0 to 23.12.20, 24.12.0 to 24.12.16, and 25.12.0 to 25.12.8 have security vulnerabilities. These vulnerabilities stem from issues with the Web Access component, which may...

Oracle Application Object Library security vulnerabilities

The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. Unauthorized attackers may gain access via the HTTP network. Without interaction with authorized personnel, they may create, delete...

Oracle Communications BRM – Elastic Charging Engine security vulnerability

Oracle Communications BRM – Elastic Charging Engine 15.2.0.0.0 version has a security vulnerability. This vulnerability stems from issues with the Security component. It may allow low-privilege attackers to access via the TLS network. Unauthorized individuals can create, delete, or modify critica...

Oracle BI Publisher security vulnerability

Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities are due to issues with the Web Server component. Unauthorized attackers may gain access through HTTP networks. They can unauthorizedly update, insert, or delete certain...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may gain access through HTTP network interactions that require user interaction. This allows...

Oracle Identity Manager Connector security vulnerability

Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Identity Manager Connector contain a security vulnerability stemming from issues within the Connectors and Connector Server components. This vulnerability may allow attackers with elevated privileges and network access via SOAP to compromise Oracle...