EUVD-2026-105933

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...

EUVD-2026-105915

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management component: Database extensions. Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2026-101520

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...

CVE-2026-101500

Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management component: Database extensions. Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnerability allows high privileged attacker with logon to the...

CVE-2026-101520

A vulnerability exists in the NextGen Installer component of the Oracle Global Lifecycle Management NextGen OUI Framework product within Oracle Fusion Middleware. Affected supported versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, and 15.1.1.0.0 . An unauthenticated attacker with ...

CVE-2026-101500

A vulnerability exists in the Oracle Global Lifecycle Management OPatchAuto product (component: Database extensions ), specifically affecting supported versions 12.2.0.1.16-12.2.0.1.52 . A high-privileged attacker with access to the infrastructure where OPatchAuto executes can compromise the prod...

PT-2026-119205

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0 and 15.1.1.0.0. Easily exploitable vulnerability allows...

EUVD-2024-18904

Malicious code in bioql PyPI...

EUVD-2023-26059

Malicious code in bioql PyPI...

CVE-2024-21190

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...

CVE-2024-21190

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...

CVE-2024-21190

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...

PT-2024-7083

Name of the Vulnerable Software and Affected Versions Oracle Global Lifecycle Management FMW Installer version 12.2.1.4.0 Description The issue is related to insufficient input validation in the Cloning component of the Oracle Global Lifecycle Management FMW Installer product. This allows an...

Oracle Fusion Middleware security vulnerabilities

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. A security vulnerability exists in Oracle Global Lifecycle Management...

CVE-2024-21190: Undefined Security Weakness

Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware component: Cloning. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SFTP to compromise Oracle...

Oracle Global Lifecycle Management (OPatch) (Jan 2023 CPU)

The installation of Oracle Global Lifecycle Management OPatch installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware...

CVE-2023-21894

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer issues. Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the...

Oracle Global Lifecycle Management security vulnerabilities

Oracle Global Lifecycle Management is a database lifecycle management solution for Oracle Enterprise Manager from Oracle Corporation that automates time-consuming tasks related to discovery, initial provisioning and cloning, patching, configuration management, continuous change management, and...

CVE-2023-21894

CVE-2023-21894 affects Oracle Global Lifecycle Management NextGen OUI Framework (NextGen Installer issues). Public sources indicate a input-validation weakness in the NextGen Installer component that can be exploited by a low-privileged user with logon to the host running the framework; exploitat...

CVE-2023-21894: Improper Access Control

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer issues. Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the...