21472 matches found
CVE-2024-21148
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...
CVE-2024-21148
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...
CVE-2024-21146
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: GL Accounts. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...
CVE-2024-21143
Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Management. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks ...
CVE-2024-21132
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Approvals. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks...
CVE-2024-21132
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Approvals. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attacks...
CVE-2024-21128
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite component: APIs. Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object...
CVE-2024-21169
CVE-2024-21169 affects Oracle E-Business Suite Oracle Marketing (Partners) in versions 12.2.3–12.2.13. The issue is insufficient access control, allowing an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing, potentially enabling unauthorized update/insert/delete...
CVE-2024-21167
The CVE-2024-21167 issue affects Oracle E-Business Suite, specifically the Oracle Trading Community component Party Search UI, with affected versions 12.2.3–12.2.13. A low-privileged, network-accessing attacker (via HTTP) can compromise the system, potentially allowing unauthorized creation, dele...
CVE-2024-21153
CVE-2024-21153 affects Oracle E-Business Suite, specifically the Quality Management Specs in the Process Manufacturing Product Development area, with affected version 12.2.13. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise data, enabling unauth...
CVE-2024-21152
CVE-2024-21152 affects Oracle E-Business Suite, specifically the Allocation Rules component in Oracle Process Manufacturing Financials. Affected versions are 12.2.12–12.2.13. The issue allows a low-privileged, HTTP-network attacker to compromise data integrity and confidentiality, enabling unauth...
CVE-2024-21149
CVE-2024-21149 affects Oracle E-Business Suite, specifically the Oracle Enterprise Asset Management component (Work Definition Issues). Affected: EBS 12.2.11–12.2.13. Attack via network over HTTP from a low-privilege user can lead to unauthorized creation, deletion or modification of data, or una...
CVE-2024-21148
CVE-2024-21148 affects Oracle E-Business Suite via Oracle Applications Framework (Personalization) in versions 12.2.3–12.2.13. An authenticated, high-privilege attacker with network access over HTTP can exploit this with user interaction to perform unauthorized read/update/delete of Oracle Applic...
CVE-2024-21146
CVE-2024-21146 affects Oracle E-Business Suite, Oracle Trade Management, GL Accounts. Affected versions are 12.2.3–12.2.13. The issue is described as improper authorization in GL Accounts that can be exploited by a low-privileged, network-accessible attacker via HTTP to perform unauthorized creat...
CVE-2024-21143
CVE-2024-21143 affects Oracle E-Business Suite, Oracle iStore (User Management) versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can read data from Oracle iStore. The CVE is corroborated across multiple sources (NVD, RH, Nessus plugin), with a MEDIUM severity (CVS...
CVE-2024-21132
CVE-2024-21132 affects Oracle E-Business Suite Oracle Purchasing (component: Approvals) and is listed for affected 12.2.3–12.2.13. The vulnerability permits a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Purchasing, with human interaction required, and could lead to una...
CVE-2024-21128
CVE-2024-21128 affects Oracle E-Business Suite, Oracle Application Object Library APIs. Affected: EBS 12.2.6–12.2.13. Root cause: insufficient input validation in APIs; enables a low-privilege, network-accessible attacker (via HTTP) to compromise data after requiring user interaction. Impact: una...
SQL Injection Vulnerability in e-cology 9 of Shanghai Panmicro Network Technology Co.
e-cology 9 is a large-scale collaborative management platform for enterprises. A SQL injection vulnerability exists in e-cology 9 of Shanghai Panmicro Network Technology Co. Under default configuration, an unauthorized attacker can exploit this vulnerability to execute arbitrary SQL statements,...
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2024-1880)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...