Oracle Service Bus security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle Service Bus contain a security vulnerability stemming from issues in the Core component. This vulnerability may allow attackers with low privileges to gain control over Oracle Service Bus via HTTP network access...

Oracle JD Edwards EnterpriseOne Tools security vulnerabilities

A security vulnerability exists in Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5. This vulnerability stems from issues within the Portal SEC component. Unauthenticated attackers can gain access via HTTP, potentially leading to unauthorized access to critical data or all...

Oracle Solaris Authorization Issues Vulnerabilities

Oracle Solaris 11.3 and 11.4 versions have authorization-related vulnerabilities. These vulnerabilities stem from issues with the Image Packaging System component, which may allow unauthenticated attackers to gain control of Oracle Solaris through HTTP network access...

Oracle Applications Framework Cross-Site Request Forgery Vulnerability

Oracle Applications Framework versions 12.2.3 to 12.2.15 have a cross-site request forgeing vulnerability. This vulnerability stems from issues with the Personalization component. It may allow low-privilege attackers to access through the HTTP network, and to create, delete, or modify critical da...

Oracle SOA Suite security vulnerabilities

Versions 12.2.1.4.0 and 14.1.2.0.0 of Oracle SOA Suite contain a security vulnerability stemming from issues in the Fabric Layer component. This vulnerability may allow low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, potentially resulting...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the batchupg function. Custom HTTP requests can lead to arbitrary code execution. Attackers can exploit this vulnerability through authenticated HTTP requests...

Oracle Global Lifecycle Management NextGen OUI Framework security vulnerabilities

The Oracle Global Lifecycle Management NextGen OUI Framework versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 14.1.2.1.0, and 15.1.1.0.0 contain security vulnerabilities. These vulnerabilities are due to issues with the NextGen Installer component. Unauthorized attackers may exploit these...

Oracle Mobile Field Service permission licensing and access control vulnerabilities

Versions 12.2.3 to 12.2.15 of Oracle Mobile Field Service have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the Internal Operations component, which may allow high-privilege attackers to gain control of Oracle Mobile Field Service...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, which may allow attackers with low privileges to access through the HTTP network and take control of Oracle Agile...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process version 6.2.4 has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, and it could allow low-privilege attackers to access through the HTTP network, resulting in the takeover of Oracle...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Test Framework component, which may allow unauthenticated attackers to access through the HTTP network, enabling unauthorized access to certain accessible...

Oracle Order Management security vulnerabilities

Oracle Order Management versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Product Diagnostic Tools component. Unauthorized attackers with low privileges may gain access through the HTTP network, allowing them to access critical data or acces...

Oracle Purchasing security vulnerability

A security vulnerability exists in Oracle Purchasing versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the PO View Document component and may allow low-privilege attackers to gain unauthorized access via HTTP, resulting in unauthorized access to critical data or full...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

A security vulnerability exists in Oracle PeopleSoft Enterprise PeopleTools versions 8.61 through 8.63. This vulnerability stems from an issue in the SQR component, potentially allowing unauthenticated attackers to gain network access via HTTP and thereby access critical data or all accessible da...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the Report Distribution component, which may allow unauthorized attackers to access critical data or all accessible data through HTTP network connections...

Oracle Agile Product Lifecycle Management For Process security vulnerabilities

Oracle Agile Product Lifecycle Management for Process 6.2.4 version has a security vulnerability. This vulnerability stems from issues with the Product Quality Management component, which may allow low-privilege attackers to access data via HTTP, enabling unauthorized access to certain accessible...

Oracle Siebel Apps - Marketing security vulnerability

Oracle Siebel Apps – Versions 17.0 through 26.9 contain a security vulnerability. This vulnerability stems from issues within the Marketing component, which may allow unauthenticated attackers to exploit HTTP-based access to perform attacks. However, user interaction is required for such attacks ...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the SQR component, which may allow low-privilege attackers to access critical data or all accessible data through the HTTP network...

Oracle Siebel Apps – Marketing security vulnerabilities

Oracle Siebel Apps – Versions 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from issues with the Email Marketing component. Unauthorized attackers may gain access through the HTTP network. Under user interaction, unauthorized updates, insertions, or deletions of certain...

Oracle Purchasing security vulnerability

Oracle Purchasing versions 12.2.3 to 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Internal Operations component. They may allow low-privilege attackers to access through the HTTP network, and require interaction from someone other than the attacker. This...