CVE-2026-21962-o

CVE-2026-21962 It is my first CVSS 10.0 CVE! 👍✅💯㊗️🀄️🈵 Summary Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. IMPORTANT: Message from orignal Finder Consider the potential damage to...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Oracle Enterprise Manager for Siebel security vulnerabilities

Versions 13.5 and 24.1 of Oracle Enterprise Manager for Siebel contain a security vulnerability stemming from issues in the Configuration Management component. This vulnerability may allow attackers with low privileges to gain access to Oracle Enterprise Manager for Siebel via HTTP network access...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow low-privilege attackers to gain control of Oracle Purchasing via HTTP network access...

Oracle Trusted Answer Search security vulnerability

Oracle Trusted Answer Search version 26.1 contains a security vulnerability stemming from issues in the Application Expert UI component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP network access and user...

Oracle Contract Lifecycle Management for Public Sector security vulnerabilities

Oracle Contract Lifecycle Management for the public sector versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Award/PO component, and they could allow low-privilege attackers to take control of Oracle Contract Lifecycle Management for the...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Product Hub through HTTP network access...

Oracle Cost Management security vulnerabilities

Oracle Cost Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Cost Planning component, and they could allow low-privilege attackers to take control of Oracle Cost Management through HTTP network access...

Oracle Essbase security vulnerabilities

The Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component. They could allow low-privilege attackers to take control of the Oracle Essbase through HTTP network access, and may also significantly affect other products...

Oracle Contract Lifecycle Management for Public Sector security vulnerability

Security vulnerabilities exist in Oracle Contract Lifecycle Management for Public Sector versions 12.2.3 through 12.2.15. These vulnerabilities stem from issues within the Award/PO component and may allow attackers with elevated privileges to gain control over Oracle Contract Lifecycle Management...

Oracle Materials Requirement Planning security vulnerability

A security vulnerability exists in Oracle Materials Requirement Planning versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow attackers with low privileges to gain access to Materials Requirement Planning via HTTP network...

Oracle Order Management security vulnerability

A security vulnerability exists in Oracle Order Management versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Product Diagnostic Tools component, potentially allowing attackers with limited privileges to access critical data or all accessible data via HTTP network...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to take control of the product through HTTP network access...

Oracle Siebel CRM Cloud Applications security vulnerabilities

Oracle Siebel CRM Cloud Applications versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Siebel Cloud Manager component. Attackers with low privileges may exploit these vulnerabilities to gain control of Siebel CRM Cloud Applications through HTTP...

Oracle Marketing permission licensing and access control vulnerabilities

Versions of Oracle Marketing from 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Audience component. Attackers with low privileges can exploit these vulnerabilities through HTTP network access. This requir...

Oracle Primavera Unifier security vulnerabilities

Versions of Oracle Primavera Unifier from 21.12.0 to 21.12.17 and 22.12.0 to 22.12.15, from 23.12.0 to 23.12.16, from 24.12.0 to 24.12.16, and from 25.12.0 to 25.12.9 contain security vulnerabilities. These vulnerabilities are due to issues with the Logging component, which may allow low-privileg...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It is difficult to exploit this vulnerability, but it may allow unauthenticated attackers to gain control of the product...

Oracle Product Hub security vulnerabilities

Oracle Product Hub versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow low-privilege attackers to take control of Oracle Product Hub through HTTP network access...

Oracle EDI Gateway: Vulnerabilities in permission management and access control mechanisms

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to gain control of Oracle EDI Gateway throug...

Oracle Siebel CRM Deployment information leakage vulnerability

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has a vulnerability related to information leakage. This vulnerability stems from issues with the Server Infrastructure component, allowing unauthorized attackers to access critical data or all accessible data through HTTP network access...