Oracle Java SE security vulnerabilities

Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27 versions; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1 versions; as well as Oracle GraalVM Enterprise Edition 21.3.19.1.1 contain security vulnerabilities. These vulnerabilities stem from issues with the...

Oracle Siebel Apps - Field Service security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability stemming from issues in the Smart Answer component. This vulnerability may allow highly privileged attackers to gain HTTP access, potentially leading to a takeover of Oracle Siebel Apps – Field Service...

Oracle JD Edwards EnterpriseOne Configurator security vulnerabilities

Oracle JD Edwards EnterpriseOne Configurator 9.2 has a security vulnerability. This vulnerability stems from issues with the Configuration Management component, which may allow attackers with low privileges to access through the HTTP network, and to unauthorizedly create, delete, or modify critic...

IBM ContextForge MCP Gateway Server Request Forgery Vulnerability

The IBM ContextForge MCP Gateway versions 0.1.0 to 1.0.5 have a server-side request forge vulnerability. This vulnerability stems from the lack of verification of the oauthconfig.tokenurl parameter during the OAuth login process. Certified users with gateway creation permissions can construct...

Oracle Customer Care security vulnerabilities

Oracle Customer Care versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow unauthorized attackers to access through the HTTP network, potentially leading to unauthorized updates, insertions, or...

Oracle WebCenter Content: Vulnerabilities in Permissions, Licensing, and Access Control

Oracle WebCenter Content 14.1.2.0.0 version has vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Content Server component. They may allow unauthorized attackers to access critical data or all data through the HTTP network, as well...

Oracle WebCenter Content security vulnerability

The Oracle WebCenter Content version 14.1.2.0.0 contains a security vulnerability stemming from issues in the Content Server component. This vulnerability may allow unauthenticated attackers to gain HTTP access. Under user interaction, they can perform unauthorized updates, insert or delete...

Oracle WebCenter Content authorization issue vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain an authorization issue vulnerability. This vulnerability stems from issues within the Content Server component and may allow unauthenticated attackers to gain HTTP access, thereby taking control of Oracle WebCenter Content...

Oracle Business Intelligence Enterprise Edition security vulnerabilities

Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BI Search component, which may allow attackers with low privileges to gain control of Oracle Business Intelligence...

Oracle JD Edwards EnterpriseOne Tools: Vulnerabilities in permission management and access control mechanisms

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Monitoring and Diagnostics SEC component. They may allow high-privilege attackers to access critical data through the HTTP network, unauthorized access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the Interoperability SEC component. They may allow low-privilege attackers to access critical data or all data via the HTTP network, as well as cause certa...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Essbase Web Platform component. They may allow low-privilege attackers to access critical data via the HTTP network, to access all accessible data without authorization, as well as to...

Oracle Email Center security vulnerabilities

Oracle Email Center versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Message Component component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without proper authorizatio...

Oracle Applications Manager security vulnerabilities

Oracle Applications Manager versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component, which may allow attackers with low privileges to gain control of Oracle Applications Manager through HTTP network access...

Oracle Sales Online permission and access control issue vulnerability

Versions 12.2.3 through 12.2.15 of Oracle Sales Online contain a vulnerability related to permission and access control issues. This vulnerability stems from problems within the Internal Operations component, potentially allowing low-privilege attackers to create, delete, or modify critical data ...

Oracle REST Data Services security vulnerabilities

A security vulnerability exists in Oracle REST Data Services versions 24.2.0 through 26.1.0. This vulnerability stems from an issue in the ADP component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle JD Edwards EnterpriseOne Orchestrator security vulnerabilities

The Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have security vulnerabilities. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access through the HTTP network, allowing them to re...

Oracle PeopleSoft Enterprise FIN Common Objects Brazil Security Vulnerabilities

Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1 version has a security vulnerability. This vulnerability stems from issues with the Common Objects component. It may allow unauthorized attackers to access through the HTTP network, enabling them to update, insert, or delete certain...

Oracle WebCenter Content security vulnerability

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle WebCenter Content contain a security vulnerability stemming from issues within the Content Portal Suite component. This vulnerability may allow attackers with limited privileges to gain HTTP access and take control of Oracle WebCenter Content...

Oracle WebCenter Content security vulnerabilities

Oracle WebCenter Content versions 12.2.1.4.0 and 14.1.2.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the Content Server component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...