Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the All Miscellaneous EDI Issues component, and they could allow high-privilege attackers to take control of Oracle EDI Gateway through HTTP network access...

Oracle Demand Planning security vulnerability

Versions 12.1 and 12.2 of Oracle Demand Planning contain a security vulnerability stemming from an issue in the Internal Operations component. This vulnerability may allow unauthenticated attackers to gain HTTP access via network interactions requiring user interaction. It affects other products,...

Oracle EDI Gateway security vulnerabilities

Oracle EDI Gateway versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the EDI component. An attacker with low privileges and who can access via HTTP may be able to compromise the Oracle EDI Gateway and affect other products. This could result in...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from issues within the Web Server component, potentially allowing unauthenticated attackers to access certain accessible data via HTTP without authorization...

Oracle Concurrent Processing security vulnerability

Oracle Concurrent Processing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Concurrent Requests component, which may allow low-privilege attackers to access certain accessible data via the HTTP network, leading to unauthorized access to...

Oracle Capacity security vulnerabilities

Oracle Capacity versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access critical data through the HTTP network, enabling unauthorized access to key data or full access...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Security component, which may allow low-privilege attackers to access data via the HTTP network, enabling unauthorized access to certain accessible data...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component. It may allow unauthorized attackers to access through the HTTP network, resulting in unauthorized creation, deletion, or...

Oracle PeopleSoft Enterprise PeopleTools Authorization Vulnerability

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Business Interlink component. Unauthorized attackers may exploit these vulnerabilities to gain network access via HTTP and take control of...

Oracle Outside In Technology security vulnerabilities

Oracle Outside In Technology version 8.5.8 has a security vulnerability. This vulnerability stems from issues with the Outside In Clean Content SDK component. It may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently, resulting in a...

Oracle Identity Manager security vulnerabilities

Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 have security vulnerabilities. These vulnerabilities stem from issues with the Connector Framework component. Vulnerable attackers with low privileges may exploit these vulnerabilities to access through the HTTP network, resulting in...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow low-privilege attackers to access critical data or all accessible data through HTTP network access without...

Oracle Siebel CRM Deployment Security Vulnerabilities

The Oracle Siebel CRM deployment from version 17.0 to 26.9 has security vulnerabilities. These vulnerabilities stem from issues with the Server Infrastructure component. They may allow low-privilege attackers to access critical data and all accessible data through the HTTP network. Unauthorized...

Oracle Agile PLM security vulnerabilities

Oracle Agile PLM 9.3.6 has a security vulnerability. This vulnerability stems from issues with the Web Client component. It may allow unauthorized attackers to access through the HTTP network, requiring user interaction. This could result in unauthorized updates, insertion, or deletion of some...

Oracle PeopleSoft Enterprise FIN Common Objects Argentina security vulnerability

Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1 contains a security vulnerability stemming from issues in the eProcurement component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, as we...

Oracle iSupport security vulnerabilities

Oracle iSupport versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Service Requests component. Unauthorized attackers with low privileges may gain network access via HTTP, allowing them to access critical data or all accessible data...

Oracle Essbase security vulnerabilities

Oracle Essbase 21.8.3.0.0 version has security vulnerabilities. These vulnerabilities stem from issues with the Java Based Agent component, which may allow unauthorized attackers to access through the HTTP network, enabling them to read certain accessible data of Oracle Essbase without proper...

Oracle Order Capture security vulnerability

A security vulnerability exists in Oracle Order Capture versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Internal Operations component and may allow highly privileged attackers to take over Order Capture via HTTP network access...

Oracle Communications Billing and Revenue Management security vulnerabilities

Oracle Communications Billing and Revenue Management versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the BRM Server component. They are difficult to exploit, and unauthorized attackers may gain access through...

Oracle Siebel CRM End User Information Leak Vulnerability

The Oracle Siebel CRM End User versions 17.0 to 26.9 have a vulnerability related to information leakage. This vulnerability stems from issues with the Open UI components, allowing unauthorized attackers to access through the HTTP network and read certain accessible data without proper...